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IT managers 

give colleges 
and universities dismal 
grades when it comes to 
preparing students for corpo- 
rate IT careers, according to 
a Computerworld survey. But 
some academic leaders are 
trying to do better. | 


Blackout Tests Contingencies 


| kind, there’s always an open- 
ing of the checkbooks,” said 
Ken Jurgensen, director of 
property management at Time 
Inc. in New York. 

Mike Smith, chief technolo- 
gy officer at Forbes.com Inc. 
in New York, said he isn’t sure 
that he will be seeing more 
money, but he has no doubt 
that the blackout will increase 
| the amount of time CTOs 
spend on disaster recovery 
initiatives. 

Analysts said data protec- 
tion schemes worked almost 


Massive power outage 
reveals shortcomings of 
disaster recov ery plans 
i ae 
BY LUCAS MEARIAN 
The blackout that struck parts 
of the eastern U.S. and Canada 
10 days ago exposed business 
continuity vulnerabilities in 
IT systems and the facilities 
that support them. And it re- 
focused attention on funding 
disaster recovery projects, IT | 
managers said. | 
“Following a disaster of this 
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| flawlessly for most large com- 
| panies hit by the power out- 
| age, which left 50 million peo- 


ple in the dark for more than 
12 hours. 

For example, Roberta Witty, 
vice president of research at 
Gartner Inc. in Stamford, 
Conn., said in a research note 
that a “fantastically low num- 


| ber” of IT shops was forced to 
| move to disaster recovery fa- 
| cilities operated by SunGard 


| keep systems operating. 


Data Systems Inc. in order to 
“The 


| recovery efforts made by en- 


Blackout, page 57 


AUGUST 25, 2003 « V 


NO. 34 =$5 


Microsoft, Users 
Cope With 
Worms Chaos 


‘Top execs, rank and 


| file pitch in to handle 
| onslaught of calls 


| BY CAROL SLIWA 


REDMOND. WASH 


The voice you heard at the 
other end of a customer ser- 


| vice call to Microsoft Corp. 


are paid to do that job. 


| pitched in to answer 


during the past two weeks 
nay not have belonged to one 
of the 4,500 specialists who 
Even top executives 
phones after an “all 
hands on deck” call went out 


| to product teams on Aug. 12, 


a day after the W32.Blaster 
worm began afflicting the 
computers of companies and 
home users that hadn’t applied 
a patch for the Windows vul- 
nerability being exploited. 
Microsoft’s Product Support 
Microsoft, page 13 


IT managers say they 
are being worn down 
by wav e of fattacks | 


| BY JAIKUMAR VIJAYAN 


Users scrambling to fend off 
a continuing barrage of mali- 
cious attacks last week ex- 
pressed a growing sense of 
frustration over software vul- 
nerabilities and the constant 


| need to defend against new 


and increasingly so- 


Aya TAY phisticated threats. 
uit 


The attacks disrupt- 
ed IT services at some 
large companies and prompted 
the U.S. Department of Home- 
land Security to issue an advi- 
sory relating to one of them. 

“We are just very tired of 
this,” said Eric Beasley, a net- 
work administrator at Baker 
Hill Corp., an application ser- 
vice provider in Carmel, Ind. 
Users, page 13 


MGM Data Center Move a Hit 


Film studio’s IT team 


| directs relocation plan, 
| avoids downtime 


BY PATRICK THIBODEAU 
| LOS ANGELES 


| Metro-Goldwyn-Mayer Inc. 


owns the James Bond movie 
franchise. But the film studio 
and media company’s real ac- 
tion hero may very well be the 
head of its data center. 

MGM recently moved from 
Santa Monica, Calif., to a new 
high-rise here. In the lobby 


leading to the offices of the 
company’s top executives are 
rows of golden Oscars. Carol 
Campbell, the senior vice 
president in charge of MGM’s 
data center, isn’t eligible for 
an Academy Award. But this 
spring, she directed one of 


| MGM's biggest and most im- 
| portant productions: the relo- 


cation of its data center. 
Moving employees and desk- 
top systems was easy, Camp- 
bell said. But, she added, “the 
part that was challenging was 
MGM, page 16 





The world’s fastest personal computer. 


The new Power Mac’ G5 is here. It’s the world’s fastest” personal computer, and the 
first with a 64-bit processor. At its heart are two revolutionary PowerPC G5 processors, 
-_ The PowerPC G5 chip running at speeds up to 2GHz. And since these are 
Ei iedeancnd ae at 64-bit processors, they can access up to 8GB of 
ea computer memory in the Power Mac G5, which is double the 
4-gigabyte memory ceiling of every other PC in the world. The G5 processors also 
have the world’s fastest frontside bus, running at 1 gigahertz, which gets data to the 


processor almost twice as fast as the 533-megahertz SPECint_rate 2000: Integer calculations 


Dual 2GHz PowerPC G5 16.9 


Dual 3.06GHz Xeon 16.7 
dual 3.06GHz Xeon machine). 3GHzPentium4 10.3 


bus found in the next-fastest personal computer (a 


In side-by-side speed tests using industry-standard SPECfp_rate 2000: Floating-point calculations 


Dual 2GHz PowerPC G5 ee) 


Dual 3.06GHz Xeon 11.1 
up to 41% faster than both the fastest Pentium 4 and ‘3GHzPentium4'si 


benchmarks, the dual 2.0-gigahertz Power Mac G5 is 


dual-processor Xeon workstation. And the results get | /ndependent tests show the Power Mac 
G5 edges out the competition on integer 

even better when using real-world applications: and blasts past them in floating-point. 

the new Power Mac G5 runs Photoshop more than twice as fast as the fastest PCs. 


Further tests reveal there are similar gains across a wide range of applications, from 


PC G5 chip is based music and video to science and mathematics. 


a it supe naa prot ie Impressed? We haven't even touched on 
the Power Mac G5's other features. Like its ultrahigh-bandwidth system architecture, 
featuring AGP 8X, PCI-X, FireWire’ 800, Gigabit Ethernet, up to 500 gigabytes (yes, 
that’s half a terabyte) of internal Serial ATA storage anda SuperDrive’ 7" 

for DVD authoring. All inside a stunning, professional-quality 

aluminum enclosure that features four discrete computer-controlled 

cooling zones for whisper-quiet operation. Together, they make 


the Power Mac G5 a true breakthrough in personal computing. 
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security services are created equal. Only Internet Security Systems’ X-Force Managed Protection 
Services offer guaranteed protection beyond the mere management of security devices. We 
are so confident we can provide complete protection, we PMO MM RO Me ame 
allowing you to focus on more important things - like your business. For more information, call 
800-776-2362 or visit www.iss.net/iss-cw. at 
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Hands On: Handhelds Try to Do It All 


In the Technology section: We test five all-in-one 
handheld devices that offer a combination of 
e-mail, PDA, camera and cell phone features. 
Two are clear winners. Page 30 
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ETL: Preparation Is the Best Bet 


In the Technology section: Extract, transform and load 
software is the foundation of a data warehouse. But 
preparation is the critical success factor, say IT pros 
like Argosy Gaming’s Jason Fortenberry. Page 25 
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PeopleSoft announces a 
“productivity pack” for its 
CRM applications in an effort 
to expedite installations of the 
software and connections to 
back-office systems. 


Dwindling membership leads 
the Communications Man- 
agers Association to disband 
after 55 years in operation. 


Drugstores embrace a new 
online prescription network, 
but getting doctors connected 
could take years. 


SCO says it will revitalize its 
Unix server operating system 
as a rival to Linux, adding a 
technology front to its attacks 
on the open-source OS. 


Expand Networks readies a 
pair of bandwidth-optimiza- 
tion devices. 


Q&A: Microsoft VP Jim 
Allchin says the company will 
take a proactive approach in 
response to the Blaster worm 
and develop new security 
technologies. 


Microsoft plans to extend 
mainstream support for 
Exchange Server 5.5. 


Gateway sets its sights on 
corporate data centers by 
offering new servers, plus 
a low-end disk array and a 
rebranded tape library. 


4 Real-time data warehousing 
is a hot topic, but not all 
analysis applications require 
instant data integration, says 
a panel of IT managers. 


backs up your systems every 
day, but technologies vary in 
capacity and speed. Learn 
how the six most common 
tape-backup formats work, 
the maximum capacities they 
support, how fast they’ll back 
up your data and where each 
works best. 


34 Security Manager’s Journal: 


Knowledge Base Boosts IT 
Reports. Mathias Thurman 
increases security staff pro- 
ductivity cheaply by imple- 
menting an open-source 
knowledge base program and 
building a simple SQL Server 
application to handle incident 
reporting and tracking. Best 
of all, one of the products 

is free. 


MANAGEMENT 





41 Careers: Preparing Genera- 


tion Z. Academia tries to 
forge closer ties with corpo- 
rate CIOs, who want gradu- 
ates to have more business 
experience. 


44 Q&A: Why Projects Fail. Con- 


sultant Sue Young explains 
why project status reports are 
so rosy, why managers contin- 
ue to fund losing efforts and 
why some projects are 
doomed from the start. 


46 ‘Big Bang’ Works Best. Try- 


ing to improve your supply 
chain operations? A new 
study says revamping the en- 
tire system yields a bigger 
ROI than making small 
changes along the way. 


32 QuickStudy: Tape Types. Tape ; 8 On The Mark: Mark Hall gets 


lost on the Microsoft campus 
but learns security is the rea- 
son. It’s also the reason for a 

new industry partnership. 


20 Maryfran Johnson is horri- 
fied to learn that spam may 
ruin her online shopping fun. 
Luckily, readers have suggest- 
ed proven ways to stop spam. 


20 Pimm Fox claims that new 
collaboration tools for pro- 
grammers will improve soft- 
ware quality. One such tool is 
also an online service. 


Dan Gillmor argues that what- 
ever you think about presi- 
dential hopeful Howard Dean, 
you can learn from his online 
operations. 


37 Robert Mitchell says that if 
Microsoft wants to get serious 
about Windows security, it 
should slim down the bloated 
operating system. 


49 Tom Pisello says companies 
can calculate IT spending 
based on a hierarchy of needs 
that helps assess what’s most 
important to the bottom line. 


58 Frankly Speaking: Frank 
Hayes says there’s no reason 
for your IT team to be in the 
dark ever again. 
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QuickPoll Results 


Which infrastructure type is most 
crucial to protect against cyberattack? 


@ Take this week's QuickPoll at www.computerworld.com. 


SOURCE: COMPUTERWORLD. COM NONSCIENTIFIC SURVEY: 454 RESPONSES 


Virus News Updates 

SECURITY: For the latest coverage of Sobig, 
Blaster and other threats, visit the Virus and 
Worms page in our Security Knowledge 
Center. @ QuickLink 21280 


Q&A: Getting IT Security 

To Reach Company Goals 

SECURITY: It’s worthwhile to make sure 
you've aligned security efforts with the right 
corporate goals, columnist Marcia J. Wilson 


reports. € QuickLink 40573 


Four Steps to Successful 
Professional Memberships 

CAREERS: Mary Ann Wagner and Mar- 
guerete Luter offer advice on finding the pro- 
fessional association that’s right for you and 
getting the most out of your involvement. 

© QuickLink 40708 
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Breaking News 

© QuickLink ai510 
Newsletter Subscriptions 
© QuickLink 21430 
Knowledge Centers 

© QuickLink a2570 
The Online Store 

© QuickLink 22420 


What's a QuickLink? 
On some pages in 
this issue, you'll see 

a QuickLink code pointing 

to additional, related con- 

tent on our Web site. Just 
enter that code into our 
you'll see at the top of 
each page on our site. 
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AT DEADLINE 


Novell Reports Loss, 
Makes Cutbacks 


Novell Inc. reported a $12.4 mil- 
lion loss for its third quarter, 
which ended July 31, and said 
that it’s reducing its workforce by 
10%. The job cuts will affect 
about 600 employees, leaving the 
software vendor with a total of 
5,700 workers. Most of the cut- 
backs were already completed 
during the third quarter, said Nov- 
ell, noting that software license 
sales fell 17% year over year. 


Oracle Warns of 
Database Holes 


Oracle Corp. warned users about 
a set of security holes in Release 
2 of its Oracle9i database and is- 
sued a software patch designed 
to address the problems. Oracle 
said the buffer overflow flaws 

in the XML Database component 
of Oracle9i could be used by 
“knowledgeable and malicious” 
hackers to take control of unpro- 
tected database servers or to 
launch denial-of-service attacks. 


IBM Signs IT Deal 
With Beverage Firm 


IBM announced a seven-year deal 
under which it will take over man- 
agement of the IT infrastructure 
at Diageo PLC, a London-based 
company that owns various 
brands of alcoholic beverages. 
The two companies didn’t dis- 
close the financial terms of the 
agreement, which includes plans 
to revamp Diageo’s global net- 
work and consolidate its data 
centers and servers. 


Short Takes 


INTEL CORP. raised its third-quar- 
ter revenue forecast, citing strong 
demand for PC and server proc- 
essors. It now expects total rev- 
enue of $7.3 billion to $7.8 billion. 
. .. EBAY INC. said a power out- 
age at the primary Web hosting 
facility it uses caused its online 
auction site to go off-line for 
nearly three hours on Aug. 20. 
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PeopleSoft Aims to 


Ease 


| Tools in ‘productivity pack’ designed to 
expedite connections to back-office apps 





BY MARC L. SONGINI 
S IT CONTINUES to 
try to fend off Ora- 
cle Corp.’s hostile 
takeover bid, Peo- 

pleSoft Inc. is readying the 


| release of software that’s de- 
| signed to ease the installation 
| and integration of its CRM ap- 


plications for corporate users. 
Pleasanton, Calif.-based 
PeopleSoft this week plans to 
announce the PeopleSoft 
CRM 8.8 Productivity Pack, 
which includes new technolo- 
gy plus enhancements of some 


| existing functionality. For ex- 
| ample, the company said that 

| in an effort to help IT man- 

| agers speed up PeopleSoft 

| CRM deployments, it’s adding 


integration tools with prebuilt 
plumbing that will let users 


| quickly connect their cus- 
| tomer-facing applications to 


back-office systems from ri- 
vals like Oracle and SAP AG. 
The new tools are built on 
top of PeopleSoft’s AppCon- 
nect integration technology. 
| But they add business process 
and data-routing features for 
linking the CRM applications 
with finance or supply chain 
management systems to sup- 
port complex transactions, 
| such as order processing or 
| field service requests, said 
Andrew Leigh, senior product 
marketing manager for the 
PeopleSoft CRM software. 


Hands-off Approach 

Also coming is an Infosynce 

| Server application, which will 
be designed to let servers run- 
ning PeopleSoft CRM auto- 
matically exchange customer- 
related data updates via sys- 

| tems equipped with Microsoft 








CRM Rollouts 


Outlook or Lotus Notes, elimi- 
nating the need for manual in- 
tervention by users. 
PeopleSoft’s new capabili- 
ties might offer a great way to 
improve the CRM installation 
process, said Mark Federle, 
CIO at The Weitz Co., a Des 
Moines-based construction 
contractor. CRM projects can 
give IT managers “a black eye” 


FY 


® Includes a customer-track- 
ing tool for helping telemar- 
keters comply with the federal 
government's do-not-call rules. 


Supports consolidating sep- 
Fle VCRs melee lee OR Bcd 10 (4 
entry and then tracking that 
through the fulfillment process. 


= Includes integration hooks to 
back-office applications devel- 
yee M ys): awe Ole CH om 


Telecom User Group Votes to Disband 


55-year-old CMA 
hurt by dwindling 


BY MATT HAMBLEN 
The Communications Man- 
agers Association (CMA) last 


| week said its board has voted 
| to cease operations of the 


New York-based user group, 


| which was formed in 1948. 


At the group’s peak in the 
late 1990s, about 150 large 
companies were members, and 
they paid up to $600 annually 
for the right to send three em- 
ployees to monthly education- 
al meetings, said CMA Presi- 
dent Bill Moore. The CMA 
also held annual meetings in 
New York that drew hundreds 
of IT and telecommunications 
professionals looking to learn 
about new technologies and 


government regulations. 
Moore said several factors 
led to the decision to disband, 
including a steady member- 
ship drop that began in 2000 
and culminated when a recent 
membership renewal drive 
brought only one response. 
The CMA has about $10,000 
in its treasury, and the group’s 
six-member board will hold a 
final meeting Sept. 25 to dis- 
cuss donating the funds to a 
charity, said Moore, who is 
telecommunications manager 
at the Museum of Modern Art 
in New York and heads the 
CMA on a volunteer basis. 


Hard Times 

These are tough times for 
many IT trade shows and 
conferences, although some 
user groups and industry as- 
sociations are flourishing. 








Moore said he might join the 
Wall Street Technology Asso- 
ciation, another New York- 
based group that has taken 


| in some CMA members in 


the past. 

The Technology Managers 
Forum, also in New York, is 
entering its 10th year of opera- 
tions and has 400 members, 
dozens of corporate sponsors 
and three full-time staffers, 
said Priscilla Tate, its founder 
and executive director. 

Jim Luisi, executive direc- 
tor of the Society for Informa- 
tion Management (SIM) in 
Chicago, said that despite the 
slowdown in IT spending, 
his group’s membership has 
recently grown by more than 
10%. SIM has nearly 3,000 
members and 28 chapters. 
“One important factor [in 
staying successful] is being 
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because cost overruns often 
result when implementation 
teams are unable to fulfill 

deadline promises, he noted. 

Weitz runs a hosted installa- 
tion of J.D. Edwards & Co.’s 
OneWorld XE applications, 
which are now owned by Peo- 
pleSoft. Federle said he also is 
considering an installation of 
J.D. Edwards’ CRM software. 

PeopleSoft last month com- 
pleted a friendly buyout of 
Denver-based J.D. Edwards, a 
deal announced just days be- 
fore Oracle launched its unso- 
licited bid for PeopleSoft. At a 
meeting in New York next 
week, PeopleSoft is expected 
to unveil a road map for inte- 
grating its products with J.D. 
Edwards’ applications. 

The streamlined installation 
capabilities being announced 
by PeopleSoft should appeal to 
existing users that have burn- 
ing integration issues, but they 
probably won’t sway potential 
customers that have already 
been put off by the Oracle/ 
PeopleSoft battle, said Laura 
Preslan, an analyst at AMR 
Research Inc. in Boston. What 
would really help drive in- 
creased sales for PeopleSoft is 
seeing Oracle’s acquisition bid 
get “laid to rest,” she added. D 


relevant to your constituency,” 
Luisi noted. 

Colleen Boothby, an attor- 
ney at Levine, Blaszak, Block 
and Boothby LLP in Washing- 
ton, has spoken about regula- 
tory issues at CMA events and 
called the group’s demise 
“very sad.” Corporate execu- 
tives face an “eternal dilem- 
ma” over whether they should 
Pay association membership 
fees and give IT workers time 
to attend events that don’t di- 
rectly affect the corporate bot- 
tom line, Boothby said. 

But the training offered by 
user groups can yield savings 
on IT investments, she added. 
For example, the Ad Hoc 
Telecommunications Users 
Committee, a Washington- 
based association of 20 compa- 
nies that Boothby represents, 
estimates that every dollar 
spent by the group results in 
$100 in telecommunications 
savings for its members. B 
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Drugstores Embrace E-prescription System 


But it could take 
years for doctors 
to get connected 


BY BOB BREWIN 

Half of the 55,000 pharmacies 
in the U.S. are due to be con- 
nected to an electronic pre- 
scription system by year’s 
end as part of a nationwide 


rollout that’s being announced | 


today by SureScripts, a tech- 
nology company founded 

by two drugstore industry 
associations. 

The SureScripts Messenger 
Services system, which will be 
formally launched at a drug- 
store conference in Philadel- 
phia, has been beta-tested by a 
group of doctors and pharma- 
cies in Rhode Island for the 
past two years. SureScripts 


said it will use a private frame- | 


SCO Vows to Revitalize Its 
Unix Product as Linux Rival 


relay network and messaging 
software based on Microsoft 
Corp.’s .Net technology and 
XML to securely transmit pre- 
scription data between physi- 
cians and pharmacists. 

Jim Smith, senior vice presi- 
dent of health care services at 
CVS Inc. in Woonsocket, R.L., 
said the network eventually 
should provide the IT infra- 
structure needed to electroni- 
cally process prescriptions 
written by doctors throughout 
the U.S. He added that the 
SureScripts technology will 
create efficiencies for both 
doctors and pharmacies, com- 
pared with the current use of 
paper-based prescriptions. 


Million-Dollar Question 
But how to hook up doctors to 
the network is “the million- 
dollar question,” said Rick 
Ratliff, executive vice presi- 
dent of technology and al- 
liances at Alexandria, Va.- 
based SureScripts. 

The company wants to sign 
up a stable of electronic pre- 
scription software vendors 
and certify that their applica- 
tions are interoperable with 
the new network, Ratliff said. 
But so far, SureScripts has cer- 
tified only one software ven- 
dor, InstantDx LLC in Gaith- 
ersburg, Md. 


Mark Bard, an analyst at 


| Manhattan Research LLC in 
| New York, predicted that only 


about 25% to 30% of the coun- 
try’s doctors will be tied into 


| the SureScripts network by 
| 2005 or 2006. Setting up a na- 
| tionwide electronic prescrip- 


tion system could cost the 


| health care industry a total of 


$150 million, Bard said. 
Ratliff agreed with Bard’s 
timeline and said SureScript’s 


| initial goal is to sign up doc- 
| tors he described as being 


“heavy prescribers.” 
Not only will there be chal- 


| lenges in getting doctors con- 


nected to the network, but 
drugstore chains may also 
have to make IT changes in 
order to accommodate Sure- 
Scripts. For example, Smith 





BY TODD R. WEISS 

The SCO Group Inc., which 
began a legal attack against 
Linux in March, last week an- 
| nounced plans to rebuild its 





| Unix operating system line 
| next year in a bid to make the 
| software a more viable alter- 
| native to Linux technology. 
| Users and resellers who at- 
| tended the company’s SCO Fo- 
rum conference in Las Vegas 
| said they were heartened by 
| the release of the development 
| road map, adding that it ad- 
| dressed many of the concerns 
| they had about the future of 
| SCO Unix following several 
| years of neglect and owner- 
ship changes. 

| But many IT managers 
whose companies don’t al- 
| ready use SCO Unix said in 
telephone interviews or via 
e-mail that SCO’s legal as- 
sault on Linux — which in- 
cludes a lawsuit against IBM 
and threats to sue users of the 
| Open-source operating system 
— have left them unwilling to 
even consider the company’s 
technology. 

“I have no intentions of ever 
| doing business with SCO,” 





ureScripts Messenger Services | 


[SureScnts Messenger Services 


= The message data format used by SureScripts is based on the National 
Council for Prescription Drug Programs Script 4.2 standard, which 


supports the electronic transmission of prescriptions. 


Microsoft .Net and XML are being used as the underlying technolo- 
gies for SureScripts’ messaging software in an effort to ensure that it can 
communicate with various back-office systems. 


NDCHealth Corp., an Atlanta-based vendor of both pharmacy and 
medical practice management systems, is hosting SureScripts’ applications 


at its data center. 


said that CVS had to modify 
its back-end systems before it 
| could connect to the network. 
He declined to disclose how 
much it cost the company to 
make the changes, but he said 
use of the network should pro- 
duce cost savings over time. 
But even more important 


said Chad Wilson, a computer 
support analyst at an Ohio- 
based hospital that runs Win- 
| dows servers as well as some 
Linux and IBM AIX systems. 
“Basically, with their tactics, 
they hurt their chance of get- 
ting a future customer.” 
Ronald Edge, manager of 
information systems at Indi- 
ana University’s Intercolle- 
giate Athletics Department in 
Bloomington, was even more 
blunt. “I feel a harsh, bitter 


| PLANNED FEATURES 


SCO OpenServer 
Legend 


m Increased support for data- 
bases and Java technology 


« Security enhancements 
= Expanded compatibility 
with Windows 


= Support for open-source 
applications, such as the 
Apache Web server and 
Mozilla browser 


vices technology 


| needs to be revital- 
| ized. “It’s like a 





is the expectation that auto- 
mating the prescription proc- 
ess will reduce medical errors 
and free pharmacists to spend 
more time with customers, 
Smith said. He added that the 
SureScripts network will fully 
comply with the data privacy 
and security requirements of 


Norwegian cold equivalent to 


| hell toward SCO,” Edge said. 


Beyond SCO’s legal actions 
and threats, the dearth of new 
Unix development by the 
company in recent years 


| makes it difficult to trust its 


new product-release road 


| map, he noted. 


Darl McBride, 


| SCO’s president and 
| CEO, acknowledged 


in an interview that 


| the Lindon, Utah- 
| based company’s 


Unix technology 


house that hasn’t 
been maintained ina 
few years,” McBride 


| said. “We’re going to come 


back and spruce the place up.” 
The plans include the ship- 


| ment next year of a more fully 


featured operating system, 


| code-named SCO OpenServer 


Legend, plus other new tech- 


| nologies. McBride said he 


hopes the new releases will 
convince users that SCO is 


| still a good bet for the future. 


A Unix administrator at a 
California-based supermarket 
chain, who asked that she not 
be named, said at the SCO Fo- 
rum conference that she’s glad 
to see SCO once again diving 
into Unix development. The 


the federal Health Insurance 
Portability and Accountabili- 
ty Act. 

In addition to CVS, the 
electronic prescription initia- 


| tive is being backed by other 
| large companies that belong 


to the National Association of 
Chain Drug Stores, as well as 
independent store operators 
that are represented by the 


National Community Pharma- 


cists Association, according 
to Smith. 

SureScripts is using frame- 
relay networks operated by 
AT&T Corp. and Sprint Corp. 
to set up its private network. 
The network will connect 
medical practice management 
systems in doctors’ offices to 
SureScripts’ systems and then 
to pharmacy back-office appli- 
cations, which will route pre- 
scriptions to the appropriate 
drugstores, Ratliff said. D 


chain recently began testing 
key applications on Windows 
NT in case it had to move off 
of SCO OpenServer, but the 
administrator said she'll now 
recommend that the testing be 


| scaled back. 


McBRIDE hopes 

Cant) 

PES erg 
that SCO is viable. 


“We should hang in [with 
SCO],” she said. 
“What they’ve got 
coming is great.” 
“I'd say I still have 
some concerns 
about the legal is- 
sues going on,” said 
the vice president of 
IT at a Fortune 500 
manufacturer based 
in the Midwest, who 
also asked not to be 
identified. But, he 
added, “I do feel better than I 
did. They're definitely build- 


4 


| ing on the product, so that 
| makes me much more com- 


fortable over the medium 
term. The long term is the 
question mark.” 

Stacey Quandt, an indepen- 
dent operating systems analyst 


in Santa Clara, Calif., said the 


success of SCO’s updated 
product line will largely de- 


| pend on its adoption by inde- 
| pendent software vendors. 


“There is a limit to the num- 
ber of ISVs who will support 
these products,” Quandt said. 
“Tt remains to be seen.” D 
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Dell Cuts Pricing 
On PCs, Servers 


Dell Inc. announced price cuts 
on a broad range of its products, 
including the OptiPlex PCs and 
PowerEdge servers intended for 
corporate users. For example, 
Dell said the price of the four- 
CPU PowerEdge 6600 is being 
reduced by 22%, to about 
$9,900. Dell has been feeling 
some pricing pressure from IBM 
and other server rivals, said Illu- 
minata Inc. analyst Gordon Haff. 


Microsoft IM Users 
Need to Upgrade 


Microsoft Corp. said users of its 
instant messaging (IM) software 
: willlbe blocked from logging on 
unless they upgrade to the latest 
releases by Oct. 15. Users of 
MSN Messenger and Windows 
Messenger need to upgrade be- 
cause of “security issues” with 
older versions, Microsoft said. 
The plan could also affect users 
of third-party software that can 
consolidate multiple messaging 
accounts within a single client. 


HP Has Weak Q3 
But Eyes Rebound 


Hewlett-Packard Co. said its 
third-quarter financial results 
were lower than expected, pri- 
marily because of losses at its PC 
and enterprise systems groups. 
But HP Chairman and CEO Carly 
Fiorina said she expects “a 
strong fourth quarter, with every 
one of our businesses profitable.” 


Short Takes 


IBM’s semiconductor unit said it 
will lay off 600 workers and re- 
quire the remaining employees to 
take a week of unpaid vacation. 

. . Two weeks after emerging 
from bankruptcy protection, San 
Diego software vendor PERE- 
GRINE SYSTEMS INC. named a 
new CEO and a new chairman. 





NEWS 


MARK HALL ® ON THE MARK 


Microsoft Dramatically 
Improves Security 


. on its sprawling campus headquarters by no longer distributing 
maps to visitors “for security reasons,” according to a harried PR per- 
son telling lost and bewildered journalists how to navigate the large 
network of seemingly randomly numbered buildings. But security for 
the massive installed base of aging Microsoft products elsewhere in the 
world remains at risk, worries Jonathan Perera, senior director in Micro- 
soft’s security business unit. He shakes his head sorrowfully as he 


observes that “45% to 48% of Windows 
servers in the world are running Win- | 


on computers across their networks. 
What’s more, it will let your IT staffers 


dows NT 4.0,” which he points out was 
released in 1996 and designed in 1993-94, 
giving the advantage to nefarious hackers 
who “have had 10 years to learn new at- 
tack techniques.” But the good guys will 
be getting an extra tool later this quarter, 
when Microsoft releases its Security 
Configuration Wizard, which the vendor 


| remotely shut off features being used by crack- 


ers during an attack on your network. 
That way, claims CTO Brett Oliphant, 
you can keep most of your systems run- 
ning and have time to test patches before 
rolling them into your production envi- 
ronment. ® Think your network is being 
peobed by digital bandits seeking to shut 


claims will let sys- 
admins set security 
policies on a server 
once and quickly repli- 
cate them across other 
machines on their net- 
works. Even better is the 
price: $0. ® The folks at 
SecurityProfiling Inc. in 
Lafayette, Ind., will be 
shipping a similar tool 
in September. The Poli- 
cy Compliance and En- 
forcement add-on mod- 
ule to the company’s 
SysUpdate software is 
designed to give ad- 
mins central control 
over security settings 


Microsoft, unlike some vendors, 
continues to upgrade its products 
Lome CHC ee to’see an 
ashes to its popular Entourage 
Umea caret we a 
OS X’s Jaguar release. There’s no 
lee Rm Ue em LRM TaN] 
also says its Microsoft Office for the 
Mac will “track” the next release of 
le oe MUTT ES 


On a arte i ee Tee 


will ship Visual S ( 
Office 1.0.on Sept. 8 to habs eee 
grammers write Web services for 
the desktop productivity suite. 


you down? Well, maybe 


| the intruders are from the 
s Recording Industry Asso- 


ciation of America, who 
are on an inspired mis- 
sion to root out every 
major source of free 
recordings on peer-to- 
peer networks. Accord- 
ing to Peter Coppola, 
vice president of mar- 
keting at Akonix Sys- 
tems Inc. in San Diego, 
the RIAA uses legal 
probes to track the 
source IP addresses for 
distributors of illegal 
P2P-based tunes. Think 
your network is clean? 


www.computerworld.com 


Just in case, you can run Akonix’s Rogue 
Aware software (www.akonix.com/ 
products/rogueaware.asp), a free tool 
now in its 1.5 release that sniffs out unsanc- 
tioned P2P and instant messaging traffic. And 
| this fall, Akonix will upgrade its L7 En- 
terprise IM application for corporate 
users. The new version will include en- 
hancements for content-filtering and 
offer improved integration with Active 
Directory and other LDAP repositories. 

= Government security initiatives have 
spurred a partnership between Open 
Harbor Inc. in San Carlos, Calif., and GT 
Nexus Inc. in nearby Alameda that will 
be announced this week. The deal’s main 
attraction is that the two vendors have 
integrated their respective applications 
so that companies can manage their ex- 
tended supply chains, which is GT Nexus’ 
area of expertise, and present customs 
officials with documents proving that the 
goods arriving at U.S. ports of entry com- 
| ply with all the new security provisions, 
which is Open Harbor’s domain. Beth Pe- 
tersen, a vice president at Open Harbor, 
says the 24-hour rule (www.customs. 
ustreas.gov/xp/cgov/import/carriers/ 
24hour_rule/), which requires importers 
to file correct documentation about 
goods bound for the U.S. at least a day be- 
fore they’re loaded onto ships, can have a 
devastating effect on a company’s supply 
chain if the paperwork isn’t properly pre- 


| pared. U.S. Customs has already stopped 


shipment on hundreds of containers with 
botched filings. The integrated hosted soft- 
ware will have a single messaging system 
for notifying supply chain managers of 
the progress of shipments or any disrup- 
tions. Says Greg Johnsen, vice president 
of marketing at GT Nexus, if shippers fail 
to police themselves, “the government 
may step in even more and may make it 
so restrictive that importers may see 
higher costs from controls and delays.” B 





BY MATT HAMBLEN 
Expand Networks Inc. today 


| will announce two networking 


appliances that support band- 


| width expansion capabilities, 
| an emerging technology that 


gives IT managers an alterna- 


| tive to ordering bigger net- 


work pipes. 
Roseland, N.J.-based Expand 


| is rolling out the Accelerator 


4810 and 6810 devices and said 
the latter will support WAN 
speeds ranging from 2M to 
45Mbit/sec. at up to 100 sites. 
Auto parts retailer O’Reilly 





Automotive Inc. is considering 
an investment in the new 
equipment, after installing Ex- 
pand’s older Accelerator 6800 
in April to handle the mirror- 
ing of corporate data from its 
headquarters in Springfield, 
Mo., to a backup data center in 
Dallas, said Mark Garton, in- 
formation systems disaster re- 
covery team leader at O’Reilly. 
The retailer operates more 
than 1,000 stores in 17 states, 
plus ll distribution centers. 
Garton said the April installa- 
tion allowed O’Reilly to do the 





Vendor Adds Bandwidth Expansion Devices 


data mirroring on one T3 net- 
work link instead of two, re- 
sulting in savings of more than 


| $2,000 per month. 


O'Reilly bought two of the 
6800 devices at a cost of about 
$15,000 apiece, Garton said, 
adding that the new 6810 mod- 
el might be used on the frame- 
relay links between O’Reilly’s 
warehouses. 

“When we first heard of this 
technology, they made some 
pretty big claims, but it has 
worked,” Garton said. 

The worldwide market for 





| bandwidth compression and 


optimization products totaled 
only about $120 million last 
year, but it’s growing fast, per- 
haps at an annual rate of 50%, 
said Peter Firstbrook, an ana- 
lyst at Meta Group Inc. in 
Stamford, Conn. Expand con- 
trols about 80% of the market; 
its rivals include Peribit Net- 
works Inc., Packeteer Inc. and 
IT Worx Inc., he said. 

Peribit announced two new 
customers last week. One, 
London-based auto dealer Ry- 
land Group PLC, said it’s using 
the technology to cut band- 
width needs on WAN links 
among 30 locations. D 
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You're being asked to do more. You're being asked to do it with less. Microsoft Windows Server 2003 is designed 
to help you manage these opposing forces. and get the most from your infrastructure with less time, money, and 
hassle. New.servers with Windows Server 2003 can deliver twice the performance at half the cost of existing 
Windows NT 4.0 Servers. Now that’s doing more with less. Download your free evaluation copy of Windows 
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LexisNexis searches billions of documents to deliver access to authoritative news, legal, and business information. 
After testing multiplé platforms, LexisNexis chose Windows Server 2003 for one of its new search programs because 
| of the superior performance and lower support costs compared to other operating systems tested. 
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Microsoft Exec Vows 


To Fix What’s Broken: 


BY CAROL SLIWA, 

DON TENNANT AND MARK HALL 
REDMOND, WASH 

The effects of the W32.Blaster 
worm have been felt throughout 
Microsoft Corp. during the past 
two weeks, but they have been 
particularly painful for Jim 
Alichin, a self-described perfec- 
tionist. The vice president of 
Microsoft’s platforms group 
spoke with Computerworld 
last week about security mat- 
ters. Excerpts follow: 


What sorts of plans are you 
formulating to deal with 

the effects of the Blaster 
worm? I personally 

have spent a lot of time 

on this, because I think 

I’ve concluded that we 

have to take a different 

tack than what we’ve 

been taking. I have 

nothing to report now, 

but you can stay tuned 
because ... I’ve had enough, 
and I’m going to do something 
about it. We have a team try- 
ing to propose some new ap- 
proaches on this. 


Are you talking about internally 
holding individuals or groups of 
engineers accountable for specif- 
ic code vulnerabilities? No. All 
software has problems. We 
have to come at it with a dif- 
ferent approach, and just stay 
tuned. 


When analyzing the Blaster case, 
what did you find, beyond the fact 
that some people didn’t install a 
patch a month ago? If every- 
body had the patch on in the 
entire universe, fine. But the 
question is: Can you really 
expect anybody to do that? I 
think that it’s a very difficult 
proposition to expect people 
to do that perfectly. If it’s done 
perfectly, you’re home free, 
and frankly, I’ve talked to com- 
panies that did it perfectly. 


Let’s suppose you didn’t. What are 
the downsides of having one hole? 


One machine gets into your 

| environment, and you’ve got 

a problem. If your perimeter 

| protection doesn’t save you, 

then it’s inside, and let’s sup- 

pose there are just a few 

machines that haven’t been 

patched for whatever reason. 

| They were laptops, they never 

connected up to get the anti- 

virus signatures, or whatever. 

I think we’re going to have 

| to come at it from a different 

approach [than] expecting 

| perfection by the distribution, 

even though we’re going to 
give great distribution 
technology. 





Is it something that we 
can expect to see this 
year or next year? 

I don’t know. 


But there will be some 

form of technology that 

you will offer to IT profes- 
sionals? That’s right. 


Will it be a separate product? I 
| don’t think a separate product. 


| Do you have that technology now 
and just need to implement it, or 
do you need to develop that tech- 


| we can swing around to this 
pretty quickly. 


Historically, Microsoft has 

| released software products that 
weren’t secure by default. How 
far are you willing to go? Is the 
company willing to lock the sys- 
tem down completely? There’s 
lots of different answers to 
that.... The Internet Con- 

|} nection Firewall is in Win- 
dows XP. It has been in there 
all along. 

Why is it that people 
haven’t turned it on? Well, we 
| didn’t communicate it well 
enough, I guess, because it 
does protect. Honestly, I’ve 
never had a virus hit my ma- 
chine. And the reason why is I 
do a few basic things that we 
haven’t communicated. 





nology? A combination. I think | 
| sort of funny to say this, be- 
| cause it’s sort of asymptotic to 


| 





Do you feel that the security per- 
ceptions and realities that Micro- 
soft faces threaten the business? 
Yes. ... I think it threatens 


| business for everyone. It’s not 


a Microsoft statement. I think 
that customers are afraid that 
their business is going to be 
jeopardized by the IT infra- 
structure, because they’re 

so dependent on computers. 
That’s a huge problem for the 
entire industry, and it’s a huge 
problem for us. And I take it 


| very, very seriously. 


When Microsoft signed the 
$30 million contract with the 
Department of Homeland Security, 


| in alot of people’s minds that took 


things up a notch beyond “the 


| security of my company” to “the 
| security of my country.” Did that 
| contract change Microsoft's think- 


ing or approach in any way? For 
me personally, no. It might 
have for others here in the 
company. ... I think my per- 
sonal sensitivity to this has 
been high for some time now. 


What do you see as the accom- 
plishments vs. the disappoint- 
ments with regard to Microsoft’s 
Trustworthy Computing initiative 
in the past year and a half? It’s 


perfection, but the first part of 
the curve is a huge jump, so I 


| feel incredible progress. We 
| trained everyone. We have 
| people who have written text- 


books. We have threat models 
that happened. We have all the 
work that we did in terms of 
the analysis tools, which are 
really phenomenal. We have 


| some of the best people in the 


research team that are doing 
tools that analyze the code 
looking for issues. 

The level of importance on, 
“If you know of such a prob- 
lem, will you ever ship the 
product?” If there’s an exploit 
... the answer is, you don’t 
ship — and have that perme- 
ate the company so deeply, it’s 





great. Are we perfect? No. 
But if you look at the slope 


| of what we’ve accomplished, 


it’s pretty phenomenal. It may 
not be visible to everybody 
because oftentimes, once we 
turn the ship around, it may 
not be visible, but we have 


| turned the ship. 


[Windows Server] 2003 is a 


| big step up. It’s not enough, 


but it’s a big, big step up. It’s 
dramatically different than 
looking back just a few years. 
I mean, look at NT 4, look at 
Windows ME — I mean, come 
on. It’s quite a different world 
today. The ship has been 
turned, and I see all the pro- 
gress inside. 

We still demand more inter- 
nally, and in terms of our proc- 
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esses, there’s just so much 
more rigor about it in terms of 
the reviews that we do from 
external groups that come in. 
We have an academic review 
panel, so some of the best, 
world-renowned security peo- 
ple come and talk to us about 
what we're doing right and not 
doing right. All of those things 
are big steps ahead. 

You asked about disappoint- 
ments. Well, I am sort of a per- 
fectionist, and we still have 
work to do. We know that. I 
just feel really bad personally 
about this worm. I wasn’t im- 
pacted. I know how people 
could have avoided it, but they 
didn’t. So I take — the compa- 
ny takes — responsibility. 
We've got to do better. D 


Microsoft Extends Mainstream 
Support for Exchange 5.5 


REDMOND, WASH 

Corporate users who may have 
been getting anxious about the 
impending end date for Micro- 
soft Exchange Server 5.5 sup- 
port will be getting a reprieve. 

Microsoft today plans to an- 
nounce that it will extend main- 
stream support for Exchange 5.5 
through Dec. 31, 2004. The main- 
stream support period had been 
scheduled to draw to a close at 
the end of this year. 

“Customers have been asking 
for some more time to migrate 
from 5.5 to 2003,” said Missy 
Stern, an Exchange product 
manager. “We did this to give 
them the time and flexibility to 
migrate on their own schedule.” 

Stern said industry analyst 
reports show that between 40% 
and 60% of Exchange users are 
running Version 5.5, and the ma- 
jority run it on Windows NT 4.0. 
Many users have delayed migra- 
tions because of the extensive 
planning associated with the re- 
quired move to Active Directory, 
the directory used by both Ex- 
change 2000 and the newly 
released Exchange 2003. 

The mainstream support 
phase gives customers no- 
charge incident support, support 
for warranty claims and hot-fix 
support, as well as paid incident 


support and support charged on 
an hourly basis. 

An extended support period, 
which includes paid and security 
hot-fix support, typically runs for 
two years following the end of 
the five-year mainstream support 
phase. But in the case of Ex- 
change, the extended support 
phase is due to end Dec. 31, 
2005, as previously scheduled. 

In other developments last 
week, Microsoft said that the 
core products in its new Office 
System were released to manu- 
facturing. The launch date for 
Office 2003 was set for Oct. 21. 
Pricing will be unchanged from 
the previous version, Office XP. 

Microsoft also disclosed pric- 
ing for two brand-new Office 
System products. InfoPath will 
sell for $199. OneNote also is 
$199, although there will be a 
$100 mail-in rebate available for 
qualifying customers. 

Also last week, Bob Muglia, 
senior vice president of Micro- 
soft's enterprise storage and 
management division, disclosed 
that the long-delayed Systems 
Management Server 2003 is 
expected to be released to man- 
ufacturing in October, a month 
later than the company had an- 
nounced earlier this year. 

~ Carol Sliwa 
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Continued from page 1 
Microsoft 


Services group kicked into 
emergency response mode as 
more than 40,000 calls flood- 
ed the company’s support 
lines during each of the first 
four days of the assault. Com- 
pany Officials said the Blaster 
worm caused the largest spike 
in call volume that Microsoft 
has ever encountered as a re- 
sult of any virus or worm. 

To reach out to more cus- 
tomers, Microsoft last week 
took out full-page ads in news- 
papers to spread the message: 
“Protect your PC.” In the ads, 
Microsoft advised users to in- 
stall a firewall, use the Win- 
dows Update service to get 
the latest security patches and 
make sure they install up-to- 
date antivirus software. 

“The idea is to make sure 
that consumers aren’t just pro- 
tected from this particular 
worm, but are better protected 
on an ongoing basis,” said Eric 
Rudder, senior vice president 
of servers and tools. He also 
said the company conducted a 


Continued from page 1 
Users 


“But it’s unfortunately only a 
harbinger of what’s to come.” 

For the second straight 
week, security administrators 
found themselves battling 
fires on multiple fronts. First, 
a variant of the recent Blaster 
worm, variously called Nachi, 
Welchia or MSBlast.D, sur- 
faced early last week. 

Dubbed by some as a “do- 
gooder” worm, Nachi was os- 
tensibly created to disinfect 
and patch systems infected by 
Blaster. But the huge volume 
of Internet Control Message 
Protocol (ICMP) traffic that 
Nachi generated on corporate 
networks prompted the DHS 
to issue a warning about de- 
nial-of-service attacks caused 
by the worm. 

The other attack came from 
W32/Sobig.F, a fast-spreading 
variant of a previous e-mail- 
borne virus that by midweek 
had earned the dubious dis- 


| 





telephone conference call 
Aug. 21 to update corporate 
customers. 
But that prescriptive guid- 
ance marks only the initial 
steps of Microsoft’s latest 
efforts to help customers pro- 
tect their systems, according | 
to Vice President Jim Allchin. | 
He told Computerworld last | 
week that a team is working 
on new approaches that will 
involve a combination of exist- | 
ing and new technology to 
help IT professionals protect 
their systems by default. 
Allchin said he analyzed 
how Blaster got into systems, 
and his group has been “really 
tearing apart the issues about 
how we can prevent this.” As 
head of Microsoft’s platforms 
group, Allchin has overall 
responsibility for the product 
delivery, engineering and 
technical architecture of the 
Windows operating system, 


server products, .Net tools and 


new-media technology. 

“T’ve had enough, and I’m 
going to do something about 
it,” he said. But Allchin de- 
clined to provide specific de- 
tails and said simply, “It’s tech- | 


tinction of being the worst 
ever in terms of the number of | 
systems infected worldwide. 

Security experts attributed 
the worm’s seemingly un- 
precedented speed and reach 
to its ability to install on each 
machine it infects a Simple 
Mail Transfer Protocol server, 
which it uses to propagate it- 
self via e-mail, and to the fact 
that it’s spread both by e-mail 
and by network file-sharing. 

The attacks disrupted ser- 
vice at some large companies. 
On Aug. 20, Jacksonville, Fla.- 
based CSX Corp., which owns 
the largest rail network in the 
eastern U.S., had to halt pas- 
senger and freight train ser- 
vices — including the morn- 
ing commuter trains in metro- 
politan Washington — as a 
result of Blaster. The worm 
caused “significant slow- 
downs” to major applications, 
including dispatching and sig- 
nal systems, according to a 
note on the CSX Web site. 

Air Canada’s reservation 
and airport check-in systems 


nology. It’s a way that they can 
choose to run their systems.” 

Allchin said that although 
Microsoft will supply effective 
patch-distribution tools, it can’t 
expect perfect distribution to 
ever be achieved. So the com- 
pany plans to give IT profes- 
sionals “some facilities” that 
will be “a weapon in their arse- 
nal to protect themselves,” he 
said. “Stay tuned.” 


Help on the Way 

Another forthcoming mecha- 
nism that’s expected to help 
users protect their PCs is a 
combined hardware and soft- 
ware initiative known as the 
Next-Generation Secure Com- 
puting Base (NGSCB), former- 
ly called Palladium. Allchin 
disclosed last week that Micro- 
soft has seen NGSCB work on 
hardware, rather than merely 
on simulators. “We think that’s 
pretty amazing,” he said. 

In the meantime, Microsoft 
employees at all levels have 
been focusing their attention 
on coping with the latest vul- 
nerability. During a meeting 
last week, a concerned Chair- 
man Bill Gates was trying to 


Unprepared 
For Blaster 


Of 2,000 PC users surveyed 
via e-mail: 

42% said they had not down- 
loaded the patch to ward off 
Blaster prior to the attack. 


23% said they do not regularly 
download software updates. 


21% said they didn’t update anti- 
virus signatures on their systems. 


70% said their companies had 
failed to inform them about Blaster. 


N 


were similarly affected by 
Blaster, causing the Saint- 
Laurent, Quebec-based airline 
to delay and even cancel some 
flights on Aug 19. 

Even companies not directly 
affected by last week’s attacks 
felt their ripple effects. 

External e-mail service at 
the MD Anderson Cancer 
Center at the University of 


| 
| 
| 
| 
| 








find out why it was taking 40 | 
minutes for a customer to get | 
| 


| help over the telephone, ac- 


cording to Lori Moore, vice 
president of product support 
services. 

And the 1,500 Microsoft em- 
ployees who volunteered for 


| an hour’s worth of training so 


they could take customer calls 
at the company’s satellite 


| campus in Issaquah, Wash., 


included Rudder and Brian 
Valentine, senior vice presi- 
dent of the Windows division. 
But Rudder, who took time 
out from his vacation to man 
the phones, downplayed his in- 
volvement and asked that the | 
focus be “the real folks who 
were the heroes of customer 
support.” He also lauded key 


| antivirus vendors that pitched 


in, such as Network Associates | 
Inc., Symantec Corp., Com 
puter Associates International 
Inc. and Trend Micro Inc. 
“People have been living on 


adrenaline, and they’re still re- 


ally jazzed about working 
these long hours,” Moore said 
late last week, as the call vol- 
ume finally subsided to 25,000 
per day. She said most cus- 


Texas at Houston was slowed 
by Sobig.F “because of the 

massive number of pings and 
infected e-mail attempting to 


penetrate our perimeter de- 


fenses,” said Lew Wagner, the 
center’s chief information se- 
curity officer. At its peak, the 
center’s e-mail server was be- 
ing hit by “tens of thousands” 


| of such e-mails, he said. 


And Baker Hill, which uses a 
third party to screen e-mail, 


| had to deal with a stream of 


spoofed messages using the 
e-mail addresses of Baker Hill 


| employees that were being 


bounced back by other servers. | 
On Aug. 19 alone, Dulles, 

Va.-based America Online 

Inc.’s automatic e-mail scan- 


| ning service for its subscribers | 


detected 23.2 million attach- 
ments containing the Sobig.F 


| virus, according to a company 


spokesman. Though the vol- 


| ume didn’t disrupt service, 
| Sobig.F was spreading “faster 


than any e-mail virus we have 
ever seen,” he said. 
Then on Aug. 21, users were 


Microsoft made changes to its 
emergency response processes in 
the aftermath of Nimda, which hit in 
Sept. 2001. improvements included: 

w Requiring the emergency 


response process to be 
tested at least montnly and 


improved as necessary. 


ne eee 
Microsoft Watch team to 
track potential new attacks. 
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tomers have been sympathetic 
to Microsoft and have directed 
their anger at the virus writers 
who created Blaster. 

“It’s no excuse for having 
the problem,” Moore said. 
“But I think there’s great in- 
tention and great enthusiasm 
on the development side and 
in the company overall in real- 
ly fixing and addressing these 
issues.” D 


scrambling yet again to patch 
systems against two newly dis- 
covered vulnerabilities, rated 
“critical,” in Microsoft Corp.’s 
Internet Explorer software. 

The experiences of the past 
two weeks have left IT man- 
agers fuming. 

“It would be a great idea if 
the software industry had to 
pay attention to [the] product 
safety and security liability 
laws that other products have 
to adhere to,” said Dennis 
Treece, director of corporate 
security at the Massachusetts 
Port Authority in Boston. 

“As a rule, I don’t like Con- 
gress messing around with 
laws governing cyberspace be- 
cause it’s so hard to write good 
law for such a dynamic field,” 
he said. “But the issue of prod- 
uct liability is static enough as 
to beg [for] some sort of gov- 
ernment intervention.” 

As threats become more so- 
phisticated, there’s a growing 
need for more automated 
tools for testing and dealing 
with them, Wagner said. D 
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NEWS _ 


Gateway Adds Storage Devices, 
Servers to Infiltrate Data Centers 


Disk array, tape library will augment 


new line of multiprocessor systems 


BY LUCAS MEARIAN 
ATEWAY INC. this 
week plans to an- 
nounce its first disk 
array, a low-end 
product that’s part of a new 
strategy under which the PC 
vendor is trying to sell servers | 


and storage devices for use in | 
corporate data centers. 

In addition to the disk sub- 
system, which can scale from 
100GB to 2TB of capacity, 
Gateway is offering a tape li- 
brary that can handle up to 
1.6TB of data (see box). The 
disk and tape products join a 
four-processor server that the 
Poway, Calif.-based company 
introduced earlier this month 
and a dual-CPU system that it 
launched last week. 

Gateway officials said that 
application servers and stor- 
age devices are now their top 
business priorities and that the 
company plans to round out its 
hardware offerings to corpo- 
rate IT managers. 

“We'll have enterprise-class 
[storage] products by the end 
of the year and more price 
performance-oriented prod- 
ucts at the low end,” said Scott 
Weinbrandt, vice president and 
general manager of Gateway’s | 
systems and networking group. 

Rance Petty, network sup- 
port manager at FlightSafety 
Texas Inc., a company in Bro- 


Correction 

The Newsmaker Q&A feature in 
the Aug. 18 Management section 
incorrectly said that the New York 
Board of Trade is moving to a 
new trading floor next month in 
Queens. The Board of Trade is 
actually moving from its backup 
operations in Queens to the New 
York Mercantile Exchange Inc.'s 
building, which is part of the 
World Financial Center in lower 
Manhattan. 





ken Arrow, Okla., that also op- 


| erates under the name Flight- 


Safety International Inc., said 
he’s considering a purchase of 
the Gateway array for storing 
low-priority e-mail and other 
data that isn’t considered criti- 
cal. That would let Petty free 
up disk space on a more ex- 
pensive file server from Net- 
work Appliance Inc. 

Petty said that because 


| Gateway has provided him 


with good service on the 350 
low-end servers and 550 PCs 
that FlightSafety uses to run its 
pilot training simulators, he 
trusts the company to provide 
the same level of support for 
its data center devices. 

“We wouldn’t buy a high- 





end product [from Gateway] | 
right off the bat,” he added. 
“We certainly wouldn’t put it | 
up against our NetApp [box], | 
but as far as secondary stor- 
age, we'd give them a shot.” 
Despite Gateway’s lack of 
experience at the data center 
level, it isn’t at a disadvantage 
relative to PC rivals like Dell | 
Inc. and Hewlett-Packard Co. | 
in selling low-end storage de- | 
vices, said Arun Taneja, an an- 
alyst at Taneja Group Inc. in | 
Hopkinton, Mass. “At the com- 
modity level, there are plenty 
of storage products that don’t 
require any sophisticated sales | 
teams,” Taneja said. But, he 
added, if Gateway tries to sell 
more complex products, such 
as high-end disk arrays that of- 
fer data mirroring, snapshot 
and replication capabilities, 
‘then I'd have to question it.” 


Weinbrandt said Gateway is- 


| n’t just looking to make up for 


flat PC sales by adding servers 
and storage devices. The com- 
pany wants to expand its reach 


| into corporate IT infrastruc- 


tures, he said, adding that its 
plans do include a move into 


| the high-end storage market. 
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“The one thing we have go- 
ing for us is we don’t have a 
legacy [in storage],” Wein- 
brandt said. “We can deliver 
the latest technology at the 
lowest price point.” 

According to Weinbrandt, 
the Gateway 850 SCSI JBOD 


| disk array is currently a file 


server designed for direct- or 
network-attached storage. But 
he said the array will soon be 
upgraded to include support 
for iSCSI ports, which will let 
it back up block-level data on 
servers over IP networks. D 


Gateway’s Data Center Offerings 
SERVERS 
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995: A fully redundant server with up to four Intel Xeon MP processors, for 
use in running databases and e-mail systems. Starts at $5,999 


960X: A lower-end system that supports two Xeon CPUs and is aimed at 
workgroups and small or midsize companies. Starts at $1,399 
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850 SCSI JBOD: A disk subsystem that supports RAID controllers and up to 
12 hot-swappable Ultra320 SCSI drives. Starts at $2,999 


820 LTO Autoloader: A rebranded Certance LLC tape library, with one tape 
drive and up to 12 cartridges. Starts at $5,999 


Real-time Data Warehousing Tests IT's 


-anelists: Not all 
apps need instant 


| data integration 


| BY MARC L. SONGINI 


BOSTON 


Although there’s big buzz 
among IT managers about cre- 
ating real-time systems that 
can consolidate important 
business information into data 
warehouses for rapid analysis 
and reporting, a panel of users 
last week warned that consid- 
erable obstacles remain. 

For example, companies 
need to develop a business 
case for real-time integration 
before investing in projects, 
said Bob Leo, director of data- 
base administration at Land- 
star System Inc. The Jack- 
sonville, Fla.-based transporta- 
tion services company applies 
a real-time approach only in 
applications where it’s really 
needed, Leo said, adding that 


| dates are required by end 


| the information really usable 





| 
vide whatever type of data up- | 
users — whether it’s monthly, 
nightly, hourly or real-time. 

“A lot of what we’re doing is 
revolving around our ability to 


| move information from our 


disparate systems and get that 
into people’s hands and make 


in their everyday jobs,” Leo 


| said. “We do things in IT not 
| because we can, but because 


the business needs us to.” 
Landstar uses data integra- 


| tion tools developed by As- 


cential Software Corp. to 


| share information across a 
| Web-based network used by 
| independent truckers, ship- 


ping agents and customers. 
Westboro, Mass.-based Ascen- 
tial sponsored last week’s pan- 
el discussion, which was held 
as part of The Data Warehous- 
ing Institute’s TDWI World 
Conference here. 


| Ability to Serve Businesses, Users Say 


| the company’s goal is to pro- 


Stephen Zander, director of 
operations and technology for 


| enterprise solutions and ser- 

| vices at McKesson Corp. in 

| San Francisco, said the health 
| care company typically makes 


transaction data available to 
end users for analysis within 


| 24 hours. 


One big issue with real-time 


| data warehouse feeds is that 
| the company loses its “grace 
period” for cleaning up data to | 
} ensure that the information is 
| accurate, he said. 


Much of the work that goes 
into managing a data ware- 


We do things 
in IT not be- 


| Cause we can, but 


because the busi- 


BOB LEO. DIRECTOR OF DATABASE 
ADMINISTRATION, LANDSTAR SYSTEM 





house involves fixing bad data 
that might have originated “10 
systems away,” according to 
Zander. To minimize such 
problems, he said, McKesson’s 
IT staff works with the com- 
pany’s finance and billing de- 
partments to ensure that the 
data fields in their applica- 
tions are properly filled in 
from the start. 

Zander also noted that ex- 


| actly what constitutes real- 


time data integration is often 
defined differently from com- 


| pany to company, depending 


on their business needs. Mc- 
Kesson uses several Ascential 
tools, along with SAP AG’s 
Business Information Ware- 
house software, as part of its 
data warehousing operations. 
Some of Pfizer Inc.’s end 
users request real-time con- 
nections to data, said Danny 
Siegel, IT director for data 
management and architecture 
at the New York-based phar- 
maceuticals maker. But devel- 
oping such links generally 
makes sense for only a few 
employees who need hourly 
financial updates, he added. B 





lronic how it takes the cutting edge 
technology of 2003 to access the 
cutting edge technology of 1973. 


myEXTRA!™ Smart Connectors let you leverage your existing legacy data and logic. 


“Cutting edge” doesn’t cut it. You need products 
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EDS Wins Federal 
Agency Deal... 


The U.S. Department of Housing 
and Urban Development (HUD) 
has awarded Electronic Data Sys- 
tems Corp. an IT outsourcing and 
support services contract that 
could be worth up to $860 million 
over 11 years. Plano, Texas-based 
EDS will manage HUD’s systems 
and networks while also taking 
over responsibility for IT security, 
help desk operations and other 
functions. 


... And Launches a 
Desktop Service 


in other news, EDS launched a 
utility-based desktop PC manage- 
ment service that makes use of 
new “zero-touch” software de- 
ployment technology developed 
by Microsoft Corp. Microsoft re- 
leased the deployment accelera- 
tor along with a set of rollout 
scripts and guidelines that it said 


are aimed at speeding up installa- | 


tions of Windows XP, Office XP 
and Office 2003. 


Boeing Spins Off 
Messaging Tools 


The Boeing Co. said it has spun 
off a company to market its 
e-mail gateway technology. The 
new company, MessageGate Inc. 
in Bellevue, Wash., is shipping 
message-filtering software and 
plans to deliver a full line of 
e-mail security tools. It was 
launched with $5.1 million in 
funding from Chicago-based Boe- 
ing and two venture capital firms. 


Symantec Acquires 
IT Security Patent 


Symantec Corp. in Cupertino, 
Calif., said it will pay $62.5 mil- 
lion to buy a security technology 
patent from Hilgraeve Inc. in 
Monroe, Mich., and to license 
other patents that are owned by 
Hilgraeve. Symantec lowered its 
profit for its first quarter, which 
ended July 4, by $9.5 million as a 
result of the deal. 





Continued from page 1 


to really move the data center, 
and do it in such a way that no 


| one felt any downtime.” 


As told by Campbell and her 
staff, the behind-the-scenes 


story of the data center reloca- | 
| 


tion project begins in true 
Hollywood fashion — with a 
lot of make-believe. 

Two and a half years ago, 


Campbell learned that MGM’s 


data center would be moved 
from Santa Monica to a build- 
ing that had yet to be con- 


structed. “This was a new 


building, so nothing had been 


| tested,” said Campbell. 


“There’s no fiber coming into 
the building. There is no es- 
tablished infrastructure — 
there’s no electric, there’s 
nothing. There’s no building.” 
But there was a deadline: 


| May of this year. And the most 


pressing issue was the need to 
complete the relocation with- 


out any IT downtime . 


The Hard Part 

The first thing that Campbell 
did was to hire expert help, 
since she had never moved a 
data center before. MGM nar- 


| rowed a field of prospective 
| consultants down to two final- 


ists before settling on IBM, 
mainly because of the rapport 
that the company’s IT staff 
had developed with IBM’s 


| project manager. 


Once the consulting issue 
was settled, a key to the zero- 


| downtime effort was design- 


ing the network infrastructure 
for the new facility. “Think of 


| it as the blood supply,” Camp- 


bell said. “You can’t do that 
over a weekend.” 

Working with Ray Larson, 
MGM's executive director of 
telecommunications, MGM’s 
IT team recommended an all- 


| new network infrastructure to 


management. This fiber net- 
work supports gigabyte band- 
width speeds, which means, 


| for instance, that company ex- 
| ecutives will be able to view 


film dailies — daily shootings 
from movie sets — via the net- 
work instead of waiting for 
hand-delivered tapes. 

Another major upgrade in- 





That’s the 

nature of a 
good data center: 
It runs, and you 
shouldn’t notice. 


CAROL CAMPBELL, 
SENIOR VICE PRESIDENT, MGM 


volved the power supply. A 
power outage could have 
knocked out the Santa Monica 
data center. Campbell argued 
for a generator, an investment 
of more than $1 million. 

“T don’t think it was a diffi- 
cult sell, but definitely you al- 
ways have to show a corpora- 
tion the value of an invest- 
ment,” she said. “And this was 
a large investment.” The 
data center also needed 
room to grow. Campbell 
wanted to triple the size 
of the 2,000-square-foot 
data center that MGM 
had in Santa Monica. 

The data center 
processes millions of 
dollars worth of transac- 
tions for all of MGM’s of- 
fices worldwide, includ- 
ing ones in New York, 
London and Paris, and 
the company has been on 
an upswing, with rev- 
enue up 35% year-over- 
year to $882.9 million for 


| the six-month period that 


ended June 30. 

In addition, a key strat- 
egy for MGM is taking 
back part of business 
lines it had previously 
outsourced, such as 
worldwide video distrib- 


| ution. For instance, 


MGM is now handling 
distribution in North 
America. That change 
eliminated vendor fees 
paid by the company, but 
it also meant expanding 
an SAP ERP system from 
25GB to 1.8TB. 

At the new headquar- 
ters, Campbell got a 





5,000-square-foot data center, 
two and half times larger than 
the Santa Monica facility. It’s a 
gleaming space, primarily 
stacked with Hewlett-Packard 
Co. servers running the HP- 
UX version of Unix, and it had 
room for expansion. 

The move to the new site 
involved countless details, ne- 
gotiations and trade-offs. For 
instance, MGM’s IT staff 
wanted to cover the windows 
in the data center to block 
sunlight and help control the 
temperatures, but building 
management rejected that 
proposal for aesthetic reasons. 
Instead, dark shades are used, 
and servers have been set back 
from the windows. 

A lot of attention was paid 
to the actual construction. 
Among the hard-hat-wearing 
IT workers was Marietta Al- 
bin, assistant manager of com- 
puter operations. One of her 
jobs was ensuring that the fu- 
ture data center power re- 
quirements were being fol- 


RAY LARSON, MGM's executive director of com- 
munications, with part of the data center infra- 
structure whose construction he supervised. 
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lowed by contractors. She 
found discrepancies. “The 
most important thing is prepa- 
ration,” said Albin. 

Larson wanted every con- 
nection, switch and power 
supply tested before the move, 
in order to avoid surprises. 
“We just felt it was important 
to be out there [on-site] every 
day,” he said. 

Before the move date, MGM 
leased an OC12 (655Mbit/sec.) 
line to connect Santa Monica 
with the new data center and 
replicated the data on disk ar- 
rays borrowed from EMC 
Corp. “By treating it as a po- 
tential disaster, that’s how you 
mitigate risk,” said Campbell. 

The big move finally took 
place over Easter weekend in 
mid-April. Six trucks were 
lined up at the Santa Monica 
offices. Two were loaded be- 
fore Santa Monica police 
showed up to say that the 
idling trucks were violating 
the city’s nighttime noise- 
abatement ordinance. That 
prompted some reshuf- 
fling of schedules but 
caused no real delay. 

IT staffers worked 12- 
hour shifts, and many 
workers from other de- 
partments at the compa- 
ny volunteered to help 
run cable. “We were 
probably overstaffed, 
overfed — everything, 
just in terms of being 
ready,” said Campbell. 
“People took great pride 
in it; maybe it was a lit- 
tle fear. We just didn’t 
want any problems, be- 
cause it would hurt the 
company.” 

But all of the efforts 
paid off, according to 
Campbell. MGM’s em- 
ployees never missed a 
beat. Everything was 
running perfectly when 
they returned to work. 

It doesn’t bother 
Campbell or her IT staff 
that they won't be shar- 
ing any Oscar stage. Not 
at all. “People shouldn’t 
notice what I do,” she 
said. “That’s the nature 
of a good data center: It 
runs, and you shouldn’t 
notice. And we’re fine 
with that.” D 
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OPINION 


MARYFRAN JOHNSON 


Spam Fighters Respond 


Y HEART skittered with alarm last 
week when I saw our headline “Elec- 
tronic Retailers Hurt by Spam Flood” 
[QuickLink 40655], and the avid online 
shopper in me snapped to attention. 
The latest nefarious side effect of the junk e-mail flood 
is that many legitimate marketing messages — updates 
that people actually want — are being filtered out and 


forever lost. 


It’s one thing to mis- 
place work-related mes- 
sages or accidentally 
block beloved family 
members, but to be de- 
nied a great online bar- 
gain? Add another circle 
to the hell that is spam. 

All kidding aside, the 
onetime business bene- 
fits of e-mail are in pos- 
sibly irreversible decline 
because of the polluting 
effects of spam, said sev- 
eral retailers at this month’s eTail 
2003 conference in Boston. For ex- 
ample, eBags.com sends 8 million 
e-mails a month to customers who 
opt into its mailing list. Last year, 
some 22% of those customers made 
purchases. That rate has dropped to 
13%, and company officials believe 
spam is largely to blame. 

As business losses mount under 
the barrage of unwanted e-mail, sup- 
port for legislative action also grows. 
Even the most anti-government-reg- 
ulation types are rooting for an Un- 
cle Sam solution to spam. So it was 
disheartening last week to hear Tim- 
othy Muris, the Federal Trade Com- 
mission’s chief, basically admit de- 
feat before any antispam legislation 
has even passed Congress. Muris 
told the Dow Jones Newswires that 
additional laws will prove useless in 
stopping the slippery, anonymous 
spammers who already ignore exist- 
ing laws with impunity. 

So what about a national do-not- 
spam list? “I’d advise customers not 
to waste their time and effort,” said 
the FTC’s top official. Criminy. What 





does he think will help? 
Improvements in technol- 
ogy, he suggested, specifi- 
cally in software that can 
intelligently block spam 
before it reaches in-boxes. 
Earlier this month, I 
wrote about an open- 
source spam-blocking 
tool called SpamBayes 
[QuickLink 40306] that 
users can “train” to distin- 
guish between unwanted 
and wanted messages 
(like those from your favorite online 
stores). I’ve since heard from several 
people who tried it and were very 
impressed (for one, see Readers’ Let- 
ters, page 21). Other readers also vol- 
unteered some accounts of their own 
spam-fighting successes. 
One IT manager reported on Digi- 
Portal Software Inc.’s ChoiceMail 





One. It creates a “white list” for ap- 
proved senders and filters all incom- 
ing e-mail through a separate Web 
site. “This is highly effective against 
spam, since most spammers send 
from fake addresses,” he explained. 
“So the reply never gets to them, and 
they never register on the Web site.” 
A Lotus Notes/Domino user wrote 
in about his company’s beta-testing 
of SpamSentinel, from Mayflower 
Software Inc. “We only use the serv- 
er product, and it is nothing short of 
amazing with regards to how well it 
traps spam,” he said. “It does pro- 
duce some false positives, but it is 


| very easy to release them, and as im- 


portant, build a ‘white list’ for those 


| so it won’t stop them again.” 


Another suggestion was to use a 
“border filter,” which effectively 
outsources the spam problem. One 
reader’s company [QuickLink 40757] 
is using spam-blocking and virus- 
scanning services from Erado.com. 
“Over 50,000 e-mails per month are 
directed our way, but Erado is wip- 
ing out over 70% of them,” the IT 
director wrote, “providing protec- 
tion, lower traffic on our network 
and reduced staff time monitoring 
the spam epidemic.” 

Now, I would put that extra time 
to good use with some e-shopping, 
but that’s just me. D 
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PIMM FOX 


New Tools 
For Coders 


HE OPEN-SOURCE 
software tradition hails 
from inside the walls 


of IT. Corporate developers 
have long understood the program- 
ming advantages they get from being 
able to read, distribute and modify 
source code through the development 
process and beyond. But the tools for 
managing the code need to change to 
match our distributed work world. 

Tools developed for LANs are just 
not as suited for geographically dis- 
persed development environments as 
newer collaborative development soft- 
ware, nor do they have the new tools’ 
file-sharing, revision-control and Web- 
based issue-tracking features. 

With IT projects increasingly em- 
ploying developers outside the enter- 
prise, it’s also necessary to figure out 
how to share source 
code with customers 
and business part- 
ners who have built- 
in authorization and 
permission levels. In 
addition, developers 
are likely to work on 
multiple projects and 
need a management 
system (as well as 
the development 
tools) to organize 
their myriad efforts. 

One approach is to create a central 
repository that’s managed as a service 
and accessible to all. This means, for 
example, that developers in Asia, the 
U.S. and Europe could see and manage 
the most current versions of multiple 
projects, with updates available when- 
ever needed. Older, heavy client-side 
tools would make it difficult to main- 
tain version control and would put a 
strain on network resources as each 
developer downloads the latest 
changes and requirements. 

CollabNet Inc., a collaboration tool 
vendor and managed service provider 
in Brisbane, Calif., has put together a 
service that Sony, for one, is using 
across its various business units to 
maintain software quality. The advan- 
tages that this repository and managed 
service method offers include low 
bandwidth requirements and direct in- 
teraction with the development server. 
Another approach, from IBM’s Ratio- 
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nal Software division, involves the use 
of a server that hosts the master source 
code. Both techniques do away with 
the islands of data that can hamper and 
confuse software development. 

Newer collaboration tools also have 
features that allow users to reuse exist- 
ing code, maximizing existing license 
agreements. Global repositories make 
it feasible (and cost-effective) to re- 
view object component libraries and 
understand the specific context of de- 
velopment in order to get the most out 
of code. In this case, you’re looking to 
get at the original source code rather 
than the layers of enhancements that 
have nothing to do with your specific 
project. Capture tools that incorporate 
verbal information, notes and busi- 
ness-owner data are also vital to good 
collaboration tools. 

Coding with business partners is 
much different from writing code in a 
silo; new collaboration tools are de- 
signed to help. D 


DAN GILLMOR 


IT Lessons 
From Dean’s 
Campaign 


OWARD DEAN’S pres- 
idential campaign is 
setting a new standard 


for the political use of tech- 
nology as a communications tool. Cor- 
porations can learn from Dean’s ap- 
proach — and IT can help make the 
case for following the campaign’s lead. 

Dean’s Internet strategy is all about 
decentralization. Although a com- 
mand-and-control staff organization 
still exists at headquarters, Dean’s 
forces are dramatically dispersed. 
They’re raising vast amounts of money, 
creating pro-Dean weblogs, planning 
organizing meetings, chatting with one 
another in mail lists and discussion 
groups, and more. 

In practice, it all adds up to some- 
thing simple yet revolutionary in a na- 
tional political campaign: Dean’s han- 
dlers and the candidate himself are 
trusting the people out at the edges to 
be essential parts of the campaign. The 
official campaign is smart enough not 
to attempt to control what the support- 
ers are doing. Headquarters is supply- 
ing moral support and some tools — 
such as help in setting up fund-raising 
sites — but it’s emphatically staying 


away from anything that 
might be perceived as 
pulling the strings. 
What might this mean to 
corporate America? Plenty, 
though I doubt that most 
companies — like most cam- 
paigns — would be very 
comfortable with the impli- 
cations. 
Consider the following 
scenario: Your company sells 
a consumer product with a 
fairly wide customer base. 
Whether you like it or not, 
people are talking about what you sell, 
typically in online forums as well as the 
physical world, and they’re helping one 
another figure out how best to use it. 
Microsoft understood a long time 
ago that customers can help one an- 
other — and take a certain amount of 
pleasure in doing so — sometimes 
more efficiently than the paid support 
staff. It’s no coincidence that Microsoft 
does what it can to make its Usenet 


product-support news- 
groups comfortable places 
to visit and learn. 

Dean’s campaign has an 
official weblog, a comple- 
ment to the scores of sup- 
portive blogs that have 
sprung up without any offi- 
cial prodding. The official 
blog only occasionally fea- 
tures Dean’s own state- 
ments — and they’re hardly 
scintillating — but it ably 
reflects the talent and com- 
mitment of his aides. 

How many companies have even 
considered a blog? Too few. Blogs are 
relatively informal, but their key fea- 
ture is voice. They speak in a human 
way to various constituencies, if you 
will — to voters in the political world, 
and to customers, staffers and suppli- 
ers in the corporate world. 

But understanding and gaining value 
from the people out at the edges is the 
key. People who care enough about 


aaa 


what you’re doing to talk about it on- 
line, and maybe do more than that, will 


| annoy you on occasion, but they’ll also 
often be your best allies. 


IT people can use these techniques 


| to improve their own shops, of course. 


| But they should take the idea of decen- 
| tralized information to nontechnical 
managers, too. Show the suits what 

| they can get out of listening to the 

| folks outside the normal conversation- 
al stream. Then show them that IT has 
| tools to bring the conversation to the 
insiders, who can capture — in the 
best sense of the word — the value in 
those communications. 

Don’t try to clamp down on the 
edges of the network. What Dean gets 
| and his opponents don’t is that the 
conversation is about everyone’s fu- 
ture, not just the guy in the middle. D 
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Spam Filter Works 


AM COMPELLED to write con- 

cerning Maryfran Johnson's 
Aug. 4 column, “Skirmishing With 
Spam” [QuickLink 40306]. After 
researching the mechanics of the - 
SpamBayes solution, | decided to 
install the Outlook plug-in. Wow! 
What an incredibly elegant solu- 
tion. | performed an initial “training 
of the database with 69 spam mes 
sages and 75 nonspam messages. 
By the end of the day, the Spam- 
Bayes program correctly intercept- 
ed 68 new spam messages. Though 
it didn’t detect six other messages 
as spam, it was a simple matter to 
identify them as such, thus contin- 
uing to train the database. More 
important, none of my legitimate 
e-mails were misidentified as spam. 
Of course, only time will tell if this 
approach to fighting spam will re- 
main effective. For now, it certainly 
has cleaned up my in-box. 
Douglas Rosenbrock 
Senior programmer/analyst, 
Hauppauge, N.Y. 


An ERP Nightmare 


OR A COUPLE OF YEARS, | was 


employed by an outsourcer to 
run customer relations for a large 
single-instance SAP system [“Time 
to Outsource ERP?” QuickLink 
40020]. It was a nightmare. The 


tensions between the needs for 
stability in the data center and for 
changes in the application meant 
we were always fighting with the 
customer or the customer's devel- 
opment groups. The database was 
about 1TB with three replicas for 
fail-over purposes. The equipment 
was large, unwieldy and fragile. 
Promises made by the software 
vendor and the development 

| groups (a large consulting firm) 
were simply not achievable. The 
developers were happy to tell the 
outsourcer what the outsourcer 
was doing wrong, but the out- 
sourcer wasn't invited to deal with 
the practicalities and implications 
of development/design decisions. 
After two years of almost nightly 
outages, | am older, wiser and have 
a great appreciation for what oper- 
ations groups have to go through. | 
am glad to be back in architecture 
and design, though. 

| Chris Bird 

President, The Network Effect, 
Irving, Texas, 
seabird@msn.com 


Costs of Offshore 


AN SIMPSON would have never 

worded his letter as he did had he 
experienced the ax at a company 
seeking to outsource in the wake of 
9/11 [QuickLink 39864]. He shows 
a lack of sensitivity and knowledge 





| due to declining numbers of people 
| going to college for IT degrees, we 


| it will take us years to develop the 


[“IT Security Short on Funding,” 





by accusing the unemployed of 
costing 300% more, being less 
productive and doing lower-quality 
work than overseas workers. What 
is he measuring when he attributes 
higher productivity to overseas 
workers? Do experience and knowl- 
edge of the U.S. business environ- 
ment count in his analysis, or does 
he just look at number of hours 
worked or lines of code produced? 
One must be careful not to overlook 
the externalities of farming work out 
of the country. When the U.S. even- 
tually finds itself short of IT talent 


will be at the mercy of rising costs 
from foreign companies. However, 





people with the required skills. 
llene Schuss 

Project manager, Long Island, 
NY., ijs2526@aol.com 


| you make no claim against that in- 


surance. So, your effective ROI is 
zero. Was this a wasted invest- 
ment? No, it's an accepted, stan- 


| dard cost of doing business. 


Security spending follows this 


| model - you can't realize RO! on 


something based on annualized 


| loss expectancy. The effective 
| measure of a security organization 


and the associated spending can 
come only through measurements 
of risk. And a solid risk manage- 
ment program that uses periodic 
comparisons to risk assessment 
baselines is the most accurate, 
repeatable and defensible method 


| to show the value of an IT security 


organization 


| Fred Langston, CISSP 


| Senior principal consultant, 


Guardent, Seattle, 


| Fred.Langston@Guardent.com 


| COMPUTERWORLD welcomes 


How to Tally the 
Value of Security 


OI HAS ALWAYS been an inap- 
propriate measure for the ef- 
fectiveness of security spending 


| this statement with the following 


example: You buy cyber insurance 
for $100,000 per year. If you run an 


QuickLink 39992]. | like to frame | 
| 
| 

effective IT security organization, | 


| comments from its readers. Letters 
| will be edited for brevity and clarity. 
| They should be addressed to Jamie 


Eckle, letters editor, Computerworld, 
PO Box 9171, 500 Old Connecticut 


| Path, Framingham, Mass. 01701. 
| Fax: (508) 879-4843 
| E-mail: letters@computerworld.com. 


Include an address and phone num- 
ber for immediate verification. 


For more letters on these and 
other topics, go to 


| www.computerworld.com/letters 
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| AM MORE TALK 
AND LESS WALK. 


| HAVE MORE WAYS OF GETTING PEOPLE TALKING. BUT | AM NOT ALL TALK. 
| AM VOICE AND DATA, BOTH ON THE SAME TEAM. | HAVE THE POWER TO 
PUNCH TIME CLOCKS, LISTEN TO EMAIL AND SCHEDULE APPOINTMENTS. 
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Got Questions About 
Business Intelligence? 


Computerworld’s IT Executive Summit 


Has the Answers 


If you’re an IT executive* in an end-user organiza- 
tion, apply to attend one of Computerworld’s 
upcoming complimentary one-day summits on 
Business Intelligence. 


Neither a product nor a system, Business Intelligence 
(Bl) is an architecture — a collection of interrelated 
operational and business performance measurement 
applications and databases. 


The only way to succeed with BI applications is to 
understand their complexity, their cross-organizational 
nature, the needs of knowledge workers, your 
competition, your market, and customer trends. 


This summit will give you a comprehensive, one-day 
overview — and will arm you with the latest thinking 
and tools to make the right investments in BI. 


*Complimentary registration 
is restricted to qualified 
IT executives only. 
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HANDS ON REVIEWS 
Handhelds Try to Do It All 


All-in-one units offer a combination 


QUICKSTUDY 
Tape Types 


phone features. The best choices 
aren’t the most expensive — nor are 
they the most full-featured. Page 30 


f FT ae dk 


a 


LP RR Atos a 


dee)! fs 


“People thought that they were talking about the same thing, but they actually were not,” says Argosy’s Jason Fortenberry 


Extract, transform and load software is the foundation of 
successful data warehouses. IT managers need to ask the 
right questions to make ETL work well. By Alan R. Earls 


Preparation 
est Bet 


SECURITY MANAGER’S JOURNAL 
Knowledge Base 


| Here’s a primer about the six most | Boosts! Reports 
of PDA, e-mail, camera and cell | common tape-backup formats.Learn | Asimple open-source tool that tracks 
how they work, how much data they security problems and solutions 
hold, how fast they are and where promises to substantially increase 
| they fit in your company. Page 32 support staff productivity. Page 34 


HEN YOU’VE GOT half a dozen riverboat 
gambling operations, it’s important that 
everyone plays by the same rules. Ar- 
gosy Gaming Co., with headquarters in 
Alton, Ill., and a fleet of six riverboat 
casinos, had decided that bringing all 
customer data together would enhance 
management’s view of operations and potentially 
help strengthen customer relationships. To accom- 
plish those goals, though, the company needed to ac- 
cess disparate databases and put in place an extract, 
transform and load (ETL) system to help populate 
and maintain a central data warehouse. 

Jason Fortenberry, a data-warehousing analyst, 
came aboard at Argosy just as the company’s data 
warehouse project started in 2001. His job was made 
easier, he says, by the adoption of Toronto-based 
Hummingbird Ltd.’s Genio ETL tool, which helped 
bridge systems and automate processes. But like oth- 
ers going through ETL projects, he learned the hard 
way that preparing for ETL is just as important as 
having the right tools. 

The riverboats each had unique and incompatible 
ways of defining a host of operational activities and 
customer characteristics — in essence, they were 
each playing the same game but with different rules. 
But those problems remained hidden until reports 
from the company’s Teradata data warehouse began 
to turn up inconsistent or troubling data. That’s 
when Fortenberry and his staff discovered conflict- 
ing definitions for a wide range of data types — 
problems he wishes he had identified much earlier. 

Fortenberry’s troubles — and his successes — are 
typical of ETL, the complex and often expensive pre- 
lude to data warehouse success. ETL is often prob- 
lematic because of its inherent complexity and un- 
derlying business challenges, such as making sure 
you plan adequately and have quality data to process. 

Analysts, users and even vendors say all bets are 
off if you don’t have a clear understanding ofiyour 
data and what you want to achieve with it. Then 
there are choices, like whether to go for a centralized 
architecture — the simplest and most common con- 
figuration — or a distributed system, with ETL proc- 
essing spread across sort tools, system utilities and 
target databases, which is sometimes a necessity in 
larger, more complicated data warehouses. Even if 
you navigate those waters successfully, you still need 
to ensure that the ETL foundation you build for your 
data warehouse can scale to meet growing data 
streams and future information demands. 

As the term implies, ETL involves extracting data 

Continued on page 28 
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Continued from page 25 

from various sources, transforming it 
(usually the trickiest part) and loading 
it into the data warehouse. A transfor- 
mation could be as simple as a reorder- 
ing the fields of a record from a source 
system. 

But, as Philip Russom, a Giga Infor- 
mation Group Inc. analyst explains, a 
data warehouse often contains data 
values and data structures that never 
existed in a source system. Since many 
analytic questions a business user 
would ask of a data warehouse can be 
answered only with calculated values 
(like averages, rankings or metrics), 
the ETL tool must calculate these from 
various data sources and load them 
into the warehouse. 

Similarly, notes Russom, a data 
warehouse typically contains “time- 
series data.” The average operational 
application keeps track of the current 
state of a value such as a bank account 
balance. It’s the job of the ETL tool to 
regularly append new states of a value 
to the series. 

ETL is generally not cheap. Russom 
estimates that for smaller projects, 
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ETL tools range from “free” (such as 
the Data Transformation Services fea- 
ture in Microsoft Corp.’s SQL Server) 
to about $35,000 for DT/Studio from 
Embarcadero Technologies Inc. in San 
Francisco. But for tools that can handle 
enterprise-scope numbers, diverse 
sources and targets, plus complex 
transformations, Russom says to ex- 
pect entry-level pricing of $75,000 to 
$100,000. “By the time you’ve added 
necessities like connectors to special- 
ized sources and targets or extra devel- 
oper seats, the average is more like 
$200,000 per year,” he says. 

The initial costs of ETL tools will al- 
most always be higher than the initial 
costs of hand-coding, which was the 
normal approach to ETL through the 
mid-1990s. “With a hand-coded solu- 
tion, entry costs are very low,” Russom 
says. However, over time, the econom- 
ics of the two approaches invert; 
hence, it’s best to look at total ETL 
costs over a five-year period. 


The Hard Part 


“We see ETL as perhaps the most criti- 
cal component in the data warehouse 
because it includes data integration 
and cleansing and acquisition — the 
hard parts of the project,” says Jim 
Keene, enterprise data warehouse se- 
nior project manager at Milwaukee- 
based Harley-Davidson Inc. “Once it is 
in the warehouse and the schema is 
set, it is pretty easy to build views or 
apply an OLAP [online analytical pro- 
cessing] template,” he adds. 

Harley-Davidson asked Keene to 
create a comprehensive data ware- 
house from a tangle of loosely knit ap- 
plications held together with an ETL 
patchwork of SQL and Cobol code. 

“That had become harder and hard- 
er to use, given the flexibility we need- 
ed,” says Keene. By comparison, ETL 
data integration tools like the one he 
selected, Data Stage from Westboro, 
Mass.-based Ascential Software Corp., 
“come out of the box with standard 
transformations, connectivity to many 
sources and a visual interface that 
makes developer productivity very 
high,” he says. 

Although he had to add three people 
to get the project going, Keene says, 
“we've seen a payback already in terms 
of labor savings — now, I don’t have to 
write a lot of SQL and Cobol.” Based 
on his experience, he adds, it’s impor- 
tant to pick a strong partner or vendor 
that has a top-tier selection of tools. 

For his part, Gary Feierstein says he 
wishes his organization had learned 
the ETL tools lesson earlier. Feierstein 
is senior director of IT at Premier 





We see ETL 
as perhaps 
the most 


critical component in 
the data warehouse. 


JIM KEENE, ENTERPRISE DATA 
WAREHOUSE SENIOR PROJECT 
MANAGER, HARLEY-DAVIDSON INC. 


Healthcare Inc., a Charlotte, N.C.- 
based company that agglomerates in- 
formation for scores of clients in the 
health care field. 

Years ago, the company set up its 
first data warehouse using homegrown 
tools. Year by year, the process of 
adapting the tools to new ways of do- 
ing business and to the needs of new 
customers began to take more and 
more time and effort. 

In the summer of 2001, costs were so 
high that Feierstein was assigned the 
job of re-engineering the ETL process 
to make it more scalable and cost- 
effective. On the advice of Chicago- 
based consulting firm Knightsbridge 
Solutions LLC, he selected the Co- 
Operating System from Ab Initio Soft- 
ware Corp. in Lexington, Mass. 

“The key was that it was robust, ca- 
pable of working across multiple plat- 
forms, and you can add hardware and 
keep processing,” says Feierstein. 

The ETL deployment went smoothly 
and stayed close to schedule, with a 
few “bumps and bruises,” says Feier- 
stein. “The key to any new ETL devel- 
opment is the learning curve,” he ex- 
plains. Critical issues include having a 
strong quality assurance environment 
and building in scalability. 

“Ab Initio offers the ability to scale 
our product by adding hardware with- 
out rewriting the software code,” says 
Feierstein. In addition, he is able to use 
a distributed approach to ETL. He can 
divide processing tasks and run differ- 
ent processes on different servers and 
then bring the solution set back to- 
gether for the final output. 


Asking the Right Questions 
For his yearlong ETL project, which 
began with a clean slate, Argosy’s For- 
tenberry says Hummingbird’s Genio 
Suite, a data integration and ETL tool, 
quickly became the project’s “central 
nervous system,” coordinating the 
process for extracting source data and 
loading the warehouse. 

He says Genio can handle almost 
any extraction task in databases it sup- 
ports, such as Microsoft SQL Server. 
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But Fortenberry also had to work 
with a database from Progress Soft- 
ware Corp. in Lexington, Mass., which 
Genio doesn’t support. To handle data 
from that database, Genio launches a 
Perl script that makes a Telnet connec- 
tion to the Progress server and exe- 
cutes a Progress utility to extract the 
data. After this step, Genio, using its 
internal support for the file transfer 
protocol, moves the data from the 
Progress server into the ETL process. 

Fortenberry says Genio handles all 
the transform work except address 
data — for that, it launches verification 
software from Trillium Software in 
Billerica, Mass. He says Genio also 
doesn’t do well with transformations 
that are best done in sequential order. 
“We have a few Perl scripts for trans- 
formations like this that Genio launch- 
es and then picks up the output to con- 
tinue along the ETL process,” he says. 

But for Argosy, getting all that data 
into the warehouse didn’t produce im- 
mediate gratification. “The lesson was 
that people thought that they were 
talking about the same thing, but they 
actually were not,” says Fortenberry. 

For example, he explains, riverboats 
calculated visits differently. One prop- 
erty would credit a customer with a 
visit only if he actually played at a slot 
machine or table. Another had an ex- 
panded definition and credited cus- 
tomers with visits when they re- 
deemed coupons, even if they didn’t 
play. So identical customer activity 
might have one riverboat reporting 
four player visits and another report- 
ing 10. “This type of discovery was re- 
peated for everything from defining 
what a ‘player’ is to calculating a play- 
er’s profitability,” says Fortenberry. 

IT played a lead role in identifying 
problems and helping to hammer out a 
consensus among the business units 
about how to define and use many cat- 
egories of data, he says. 

Now, with the data warehouse up 
and running smoothly, the number of 
problem-resolution meetings has 
dropped dramatically. Still, Fortenber- 
ry reckons that three quarters of the 
meetings he attends nowadays have a 
business focus. “For our part, we now 
know better what questions to ask go- 
ing into the process,” he says. D 





Earls is a freelance writer in Franklin, 
Mass. 
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EchoView™ 


| can’t pull all-nighters every night. 
Thing is, our backup and recovery system has to. 
it can't rest. 
Not even for a second. 
Not if | hope to get some myself. 


Save the day. 


Make sure your data’s always safe and you'll save yourself a lot of worry. And work. One way is with EchoView™. A potent, new data- 


protection appliance that continually captures and journals data as soon as it’s written, for nonstop protection. And EchoView™ provides 


rapid recovery to any point in time, to keep business humming. So while your systems may be disrupted, your nights won't be. 


Learn all the ways we can help you at www.savetheday.com. 


en STORAGETEK’ Save the Day” 
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Handhelds 
to 
It All 


lr 


— Zire 71, $299 


Palm Inc., Milpitas, Calif. 
www.palm.com 

This device masquerades as a garden 
variety slim PDA with a brilliant color 


: can take plenty of them. With a64MB 
* secure digital (SD) memory card in the 
: slot, | never came close to running out 
: of storage space. And did | mention it 
: plays movies? Admittedly, watching a 
: movie ona PDA, using the Kinoma 


screen that has four times as many pix- 
: ing to the term small screen, but it can 


els as previous Palm color screens. 


The sharp and bright 320-by-320-pixel : 


display is better than that on most 


Player and Producer, gives new mean- 


be a surprisingly nice experience. As a 


* professional reviewer, | get to handle a 


Pocket PCs, which used to outshine all: 
: is that | buy very few for my own use. 
: The Zire 71is the first Palm I've ever 

: seriously considered purchasing. 

: m Overall grade: A 

: 8 Value for the money: A 

: = Important specs: 16MB memory; 
: 0.7 in. thick; 5.4 0z.; stereo headset 

> jack; SD expansion slot 

: © Pros: Camera is supereasy to use; 
: great color display 

* © Cons: No networking; small built-in 
* memory 


the others. But push up on the bottom 
front edge of the Zire and it slides up 
about an inch, revealing a camera lens 
pointing away from you and a picture- 
taking button on the front. What the 


\ lens sees is visible on the screen, so 


you just press and shoot to capture a 
640-by-480 VGA photo. The picture 
quality is only so-so, but | found that 
was outweighed by the conve- 
nience of always having a camera 
with me, ready to go. | used the 


Zire as a convenient way of tak- 


: Tungsten C, $499 


ing visual notes while shop- 


ping, for example. And it came : 


in handy several times when 
| wanted to take a picture 


but didn’t have a “real” cam- 


/ era with me. And while that 


> a low resolution doesn't make 


for the best pictures, they require 


only a small amount of memory, so you $ 


lot of different products, and one result 


* Palm 
: Palm tries to give every model in its 


business-class Tungsten line a differ- 
ent personality. The original T and new 


: 12 models are small and aimed at the 
: traditional Palm business user who 


prefers stylus input. The $419 W incor- : 


Combine a camera, 

a phone, a PDA 

and e-mail, and 

the results may 

bewilder you. 

Fortunately, the 

best machines are 

still the simplest. 
By Russell Kay 

nn CHOOSING A 

HANDS ON handheld de- 

vice used to 
REVIEWS be so simple. 
If you want- 


ed to make and receive phone 
calls, you got a cell phone. You 
tracked your calendar and 
contacts with a PDA. To snap 
pictures, you used a camera, 
whether digital or with film. 
For taking notes, a tape or 
digital voice recorder would 
do. For listening to music, an 
MP3 player did the trick. To 





eeeeresoceccees 


: porates a cell phone (though awkward- 

= ly, requiring an external headset) and 
SMS text messaging for the on-the-go 
user. The C has an integrated keyboard 

: and is the most expensive and power- 
ful of the line, with 64MB of RAM, Wi- 

: Fiwireless networking and a 400-MHz 

: Intel XScale PXA255 processor. In 

* comparison, the T2 uses a 144-MHz 
CPU from Texas Instruments Inc. Thus 
the C is aimed at the business user 
who wants a lot of features but doesn't 
want to shift to a Pocket PC. 
w Overall grade: A 

: m Value for the money: B 
= Important specs: 64MB memory: 
0.7 in. thick; 6.3 0z.; mono headset 
jack; SD expansion slot; voice memo 

: recorder; 802.11b wireless networking; 

thumb keyboard 
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get your messages on the go, 
there were smart pagers and 
units like Research In Motion 
Ltd.’s BlackBerry [QuickLink | 
a3560], which did a credible 
job with e-mail. If you spent 

a lot of time waiting in air- 
ports, you might have splurged 
and gotten a portable DVD 
player so you could watch 
movies. 

What all these devices have 
in common is simplicity: one 
function per device. 

But no one wants to carry 
around a half-dozen gadgets 
(and, worse, keep track of a 
half-dozen power supply 
units). Even with mainstream 
clothing designers now in- 
cluding extra pockets for our 
gizmos, it’s just too much. 

Over the past few years, 


handheld devices have taken on | 
more and more functions. The | 


first-generation multifunction 
devices tried to be jacks of all 
trades to the wired warrior, 

but they were decidedly mas- 








ters of none. When a PDA 


© Pros: Lots of memory; Wi-Fi 
connectivity; great color display 
© Cons: Relatively expensive 


Tungsten T2, $399 


Palm 

This is an update of the original Tung- 
sten T [QuickLink 34680] that in- 
cludes Palm's newest high-resolution 
color display and an extra 16MB of on- 
board memory, for a total of 32MB. The 
collapsible case design, which hides 
and covers the Graffiti 2 input area 
when not needed, makes this unit 0.75 
in. shorter than its keyboard-equipped 
brother C, and 0.5 in. shorter than the 
Zire 71. Its built-in Bluetooth capability 


Palm’s 
Tungsten T2 


Palm OS 3.5 
Palm OS 5.2.1 
Palm OS 5.2.1 


Palm OS 5.2.1 


Pocket PC 2002 


maker tried to add telephone 
functions, the result was a 
bulky and awkward phone. 


| When a cell phone maker 
| tried to add PDA capabilities, 


we learned that there’s a limit 
to what you can (or want to) 
do with a tiny screen. Camera 
add-ins worked surprisingly 


well, but the image quality and | 


integration left something to 
be desired. 
Are we past that stage yet? 


To see how well today’s hand- 


held devices perform in their 


allows for an e-mail or Internet con- 
nection via a Bluetooth-equipped cell 
phone, but | didn’t test that capability. If 
you don't need the fuller wireless con- 
nectivity or thumb keyboard of the Tung- 
sten C, this is a terrific little machine. 

w Overall grade: A 

w Value for the money: B 

w Important specs: 32MB memory; 
0.6 in. thick; 5.6 0z.; voice memo 
recorder; stereo headset jack; Blue- 
tooth; SD expansion slot; telescoping 
case design 

© Pros: Small size; Bluetooth; great 
color display 

© Cons: Still low on memory com- 
pared with competitors 


Hitachi G1000, $649 


Sprint Spectrum LP, 

Overland Park, Kan. 
www.sprint.com 

The G1000 is a real gee-whiz machine 
that is, unfortunately, akin to the prover- 
bial camel (i.e., a horse designed by 
committee). This is a Pocket PC with 
both a VGA camera and cell phone ca- 
pabilities, wireless Internet access and 
a thumb-typing keyboard. Unfortunate- 
ly, every one of those functions bulks up 
the unit, making it the largest, heaviest, 
most awkward to use and most expen- 


Te emer tsa 


| Coll 
- phone 


dal | 


I ssniteacediliiintstnan taal esesaetdoccaceianenateoes 


¥v 


v v 


| multiple roles and compare 
| their personalities, I took a 
| look at several current models 
| (see chart, above). Ail of these 
| devices started out as PDAs 

| and thus tend to be physically 
| larger than handhelds that be- 
gan life as cell phones. 

Many people I know would 


be lost or even out of busi- 


| 
E gta 
| ness if they couldn’t easily and 
| 
| 


regularly check e-mail while 
they’re out of the office. For 
them, being connected is so 

| important that, even with the 


sive of this group. It will fit in few shirt 
pockets, and in any case, | didn’t find 
that a comfortable way to carry it. All its 
functions worked, but none were espe- 
cially handy. It seemed as if this unit, 
more than any other and more so than 
previous Pocket PCs, has a really com- 
plex navigation structure, and | found 
that doing almost anything required an 
awful lot of pointing and clicking steps. 
Because of its size and weight, | found 
it impossible to use the keyboard one- 
handed. The camera swivels vertically 
through 270 degrees so that it can face 
toward or away from you, which is a 
nice convenience, but its “shutter re- 
lease button” is an icon rather than a 
physical button, and the resulting mode 


v 
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growing amount of spam that 
| clogs everybody’s in-boxes, 


Sprint PCS Vision 


Wi-Fi 


External Bluetooth 


None v 


Wi-Fi v 


they will put up with a lot of 
inconvenience and expense 
to stay connected. My person- | 
al situation is different. I nei- 
ther need nor want that de- 
gree of being “wirelessed in,” 
and as a result I may be undu- 
ly critical (or possibly not crit- | 
ical enough) in assessing the 


| usefulness of these devices’ 
| e-mail functions. 


These machines are so dif- 
ferent from one another that 


of operation seems quite unnatural. If 
you really want a single device to re- 
place separate units, this appears to be 
the most consolidated device on the 
market, but | can’t really recommend it 
w Overall grade: C+ 

w Value for the money: C 

w Important specs: 32MB memory: 
0.9 in. thick; 8.4 0z.; camera; cell 
phone with voice dialing; voice memo 
recorder; stereo headset jack; SD ex- 
pansion slot; telescoping case design 
© Pros: Camera, phone, PDA - it 
does it all 

© Cons: Expensive; big and heavy: 
awkward to hold and use 


Treo 300, $299 


Handspring Inc., 

Mountain View, Calif. 
www.handspring.com 

As a PDA, the Treo works as well as 
any Palm, although it lacks the higher- 
resolution color display of the new 
Tungsten C, the T2 and the Zire 71. Asa 
phone, this was my hands-down fa- 
vorite of the group; after a week’s use, 
| preferred it even to my own digital cell 
phone, because its well-designed in- 
terface makes it easier to use. For 
e-mail and wireless Internet access, 
the Treo was reasonably fast, though 


| there’s no simple 
| which might best suit any one 
| person’s needs. Interestingly, 
| the two standout performers 


$399 


v v $299 


v v v $649 


way to say 


were also the cheapest ma- 
chines tested: the Zire 71 and 
Treo 300. Both handle their 
disparate functions simply and 


| easily. You can’t go wrong 


with either one. D 


| Kay isa Computerworld con- 
| tributing writer in Worcester, 

| Mass. You can reach him at 

| russkay@charter.net. 


its small screen didn’t work well on 


* many Web pages. if! had to recom- 


mend just one device from this list, the 


: Treo would be my first choice. Hand- 
: spring will soon announce a successor 


the Treo 600, which is sleeker (and will 
likely cost more) than the current unit, 
and that may mean that Treo 300s will 
be available at somewhat lower prices. 
ws Overall grade: B+ 

a Value for the money: A 

w Important specs: 32MB memory: 
0.6 in. thick; 5.6 02.; voice memo 
recorder; stereo headset jack; Blue- 
tooth; SD expansion slot; telescoping 
case design 

© Pros: Good phone interface 

© Cons: Wide body can be 

awkward to hold 
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DEFINITION 
Data tapes are the principal 
storage medium for computer 
backups. They come in a vari- 
ety of formats, speeds and ca- 
pacities to meet different needs. 


BY RUSSELL KAY 
OR ALMOST AS LONG 
as computers have 
existed, magnetic 
tape has been the 
backup medium of 

choice. Tape is inexpensive, 

well understood and easy to 
remove and replace. 

But as hard drives grew 
larger and databases became 
massive data ware- 
houses, tape had to 
change to store more 
data and do it faster. 
From 10-in. reels of 
0.5-in. 9-track main- 
frame tape, focus 
shifted to the speed and con- 
venience of tape cartridges. 

Over the past 30 years, there 
have been many tape cartridge 
formats, and even today sever- 
al formats are widely used. 
This QuickStudy aims to sort 
out differences among them 
and help explain which for- 
mats best suit various needs. 


Linear Tape-Open (LTO) 
This open-format technology 
was jointly developed by 
Hewlett-Packard Co., IBM and 
Seagate Removable Storage 
Solutions (now Certance 
LLC), beginning in 1997. 
“Open” means that tapes 
and drives from different man- 
ufacturers are compatible with 
one another. Historically, 
tapes could often be read only 
by the drive that wrote them. 
LTO uses linear, multichan- 
nel, serpentine (back-and- 
forth) recording on 0.5-in. tape 
with magnetic servo for error 


| correction and hardware data 
compression. An embedded 
electronics module can store 
and retrieve usage and other 
information about a cartridge. 
LTO technology was originally 
announced in two variants, 
Accelis and Ultrium, aimed at 
speed and capacity, respec- 
tively. However, there was no 


demand for Accelis, and it has 
since been withdrawn. 
Quien 


Ultrium, a direct 
competitor to Super 
Digital Linear Tape 
(SDLT), uses a single 
tape spool inside a 
cartridge. The current 
| second-generation Ultrium-2 
tapes can store 200GB of data 
in native mode, or 400GB if 
| compression is used. A March 
2003 report by Gartner Inc. 
analyst Fara Yale states that 
| more than twice as many UI- 
| trium drives as SDLT drives 
were shipped in 2002. 


Digital Linear Tape (DLT) 
Developed by Digital Equip- 
ment Corp. in the 1980s, DLT 
is an adaptation of older reel- 
to-reel mainframe recording 
practice, where the removable 
media uses a single reel of 
tape and the drive handles the 
takeup end. According to the 
DLT Web site (www.dlttape. 
com), more than 2 million DLT 
drives have been sold, as well 
as over 90 million tape car- 
tridges. In the most recent 
version, SDLT 320, optical 
lasers use servo tracks on the 
back of the tape to align the 
magnetic recording heads. 








Current SDLT drives can read 
older DLT media. 


Advanced Intelligent 
Tape (AIT) 

Developed in 1996 by Sony 
Corp., AIT uses helical-scan 
recording on 8mm tape, simi- 
lar to that used in Hi-8 video 
camcorders. With a higher bit 
density and narrower tape, 
AIT cassettes are smaller than 
other tape cartridges, allowing 
for tape libraries that hold 
more data but take up less 
space. 

AIT’s small size makes it a 
good choice for organizations 
migrating from older systems 
based on the Digital Data Stor- 
age standard using digital au- 
dio tape. Sony is the only sup- 
plier of drives and media. 

AIT cassettes include a 
memory chip inside the media 
cartridge to record and store 





format and file-location infor- 
mation. This lets AIT tapes 
load faster and cuts file search 
times in half. 

AIT drives use IBM’s Ad- 
vanced Lossless Data Compres- 
sion (ALDC) technology, which 
offers compression averaging 
2.6:1 across multiple data types, 
vs. the 2:1 average for normal 
compression. Super AIT 
(SAIT-1) is essentially the same 
as AIT-3, but it uses 0.5-in. tape, 
giving it SOOGB native capacity. 


Mammoth 
Introduced in 1996 by Exabyte 
Corp., Mammoth is aimed at 
the midrange server market. 
The latest Mammoth-2 
drive uses a multichannel heli- 
cal scanning head on 8mm 
tape, error-correction and 
ALDC compression. 


VXA 


A unique technology devel- 
oped by Ecrix (now part of Ex- 
abyte), VXA reads and writes 
data in packets. It operates at 
variable speeds, so it can 
match the data transfer rate of 
the host and, unlike drives 

that operate at fixed speeds, it 
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doesn’t have to stop and wait 
if the host is transferring data 
at a slower rate. That reduces 
wear on drives and media. 
VXA heads can read data from 
any physical location on the 
tape, without having to follow 
tracks from beginning to end. 


Travan 

Travan drives use a linear, 
single-channel recording on 
0.25-in. tape. Its lower capaci- 
ties and inexpensive hardware 
make it suitable for remote lo- 
cations, small offices and indi- 
vidual workstation backups. D 


Kay is a Computerworld con- 
tributing writer in Worcester, 

Mass. You can contact him at 

russkay@charter.net. 


ONLINE RESOURCES 


For a list of Web sites with more information 
on types of tape, visit our Web site: 


QuickLink 40425 
www.computerworld.com 


Are there technologies or issues you'd like 
to learn about in QuickStudy? Send - 
ideas to quickstudy@c 


To find a complete archive of our 
QuickStudies, go online to 
@ computerworld.com/quickstudies 
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The market is volatile. Consumer confidence is fickle. And you’ve got a business to run. Clearly, you need business systems that help 


you plan accordingly. SAP has more than 30 years’ experience helping companies run more efhciently, with everything from analytical tools 


that help you take decisive action to an open e-business platform that helps you get more value out of the systems you've already invested in 


So no matter what size company you are, we have a long-term plan for you. Visit sap.com or call us at 800 880 1727. 


THE BEST-RUN BUSINESSES RUN SAP 
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Knowledge 


Boosts | 


An open-source tool makes an ideal 
neem? for IT security support infor- 


mation. 


NOWLEDGE bases and 
incident-reporting ap- 
plications are an im- 
portant part of my in- 
formation security depart- 
ment’s tool set. Here’s why: 
Most technically minded indi- 
viduals, especially those with 
engineering backgrounds, 
don’t consistently document 
their day-to-day activities. 

In my company’s IT securi- 
ty department, our 
team is responsible 
for the administration 
and upkeep of all of 
our applications. 
These include our 
RSA Security ACE 
SecurID authentica- 
tion servers, intrusion-detec- 
tion system (IDS) infrastruc- 
ture, integrity-checking soft- 
ware, forensics tools, wireless- 
access-point detection and 
management software, and 
our data correlation environ- 
ment. These applications and 
the operating systems on 
which they run continually 
change, so we are always tun- 
ing them, installing patches 


and troubleshooting problems. | 
| tain control of the server and 


Some of the time, when we 
figure something out, we jot 
down a few notes on what we 
did. But other times, we don’t 
write anything down at all. 


That’s fine as long as everyone | 


is around and can remember 
what they did. But people 
come and go here, and we 
tend to forget the details. 

So when a problem comes 
up again and again, it would 
be nice to be able to call upon 
past experience to quickly 
solve it. Knowledge bases are 
an excellent tool for doing 
this. We already use Houston- 
based BMC Software Inc.’s 
Remedy application for its 


ne = 


SECURITY 
MANAGER'S 
JOURNAL 


y Mathias Thurman 


help desk and change manage- 
ment functions, and we con- 
sidered using that to build our 
knowledge base. 

However, we wanted to con- 
trol the administration of the 
application and underlying 
server, since it will contain 


| sensitive security-related data. 
| We can’t do that if we’re shar- 
| ing that resource with another 


department, and buying an- 
other copy wasn’t an 
option. 

After some 
searching, I think 
I’ve found some- 
thing that fits the 
bill — and it’s free. 
PhpBrain was ini- 


| tially developed for a gaming 


project, but the developer has 


| since released the source code 


for use as a knowledge base. 
(Documentation and source 
code are available at http:// 
sourceforge.net/projects, 
phpbrain/.) 

PhpBrain is Web-based, can 
run on a standard PC and al- 
lows for easy information in- 
put, search and retrieval. In 
addition, it allows us to main- 


the data within it. With the 


| Remedy server, the informa- 


When a problem 
comes up again and 
again, it would be 
nice to be able to call 
upon past experience 
to quickly solve it. 
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tion would be centrally stored 
in another department and 
commingled with its data. 

If a disgruntled employee 
was able to obtain access to 
our knowledge base, he might 
be able to use that data to gain 
access to our security systems 
or bypass existing controls. 
For example, we don’t have 
total IDS coverage. If someone 
knew which networks aren’t 
protected, he might attempt to 
target those. 

With phpBrain, as we deal 
with a problem, we can simply 


| enter information into our 


knowledge base. I’ve already 
configured the home page 
with topics that provide quick 
access to common application 
areas, and users can perform 
keyword searches. It will take 
time and discipline to input 


| the data, but I believe this tool 


will become an indispensable 
part of our department. 


Handling the Incidentals 


Another tool that I feel is a 


| necessity is a good incident- 


reporting program. When we 


| ran an inquiry or investigation 


into a security incident in the 
past, we typically just filled 
out a Microsoft Word tem- 


| plate, printed out a copy for 


our records and saved the doc- 
ument in a shared folder. 

The problem is that in con- 
ducting an investigation or in- 
quiry, it’s important to gather 
information such as whether 
the alleged activity has oc- 


| curred before and whether 


any users have been implicat- 
ed in similar incidents. But it’s 
not easy to track such data us- 
ing this type of system. 

Also, upper management 
frequently asks for updates on 
incidents, and it becomes a 
struggle to go through all 
those Word documents to 
come up with a graph or table 
delineating types of investiga- 
tions and the corresponding 





results. For example, each 
week my manager wants to 
know how many incidents we 
had, how serious they were, 
how many man-hours we ex- 
pended to deal with them, 
whether any proprietary data 
or systems were affected and 
any dollar loss that resulted. 
Many commercial incident- 
reporting applications are 
available, but most of them are 
designed for law enforcement 
or physical security, not infor- 


| mation security. These tools 


are also very expensive and 
time-consuming to set up and 


| maintain. A search for a suit- 


able open-source program 
also came up empty. 

So I ended up getting an in- 
ternal programmer to develop 
a Web-based tool for us. He 
wrote the back-end database 
to run on Microsoft SQL Serv- 
er (we'd like our programming 
group to eventually migrate it 
to Oracle, which is our stan- 
dard) and coded the Web- 
based front end using Active 


Server Pages (ASP). 


The application features au- 
tomatic Domain Name System 
(DNS) lookups and automatic 


| entry of employee names and 


contact information. Aside 
from text entry fields, the en- 
tire application consists of a 
simple combination of check 
boxes, pull-down menus and 
radio buttons. 

The prograrnmer also in- 
cluded many queries and 
charts to accommodate the 
reports and presentations that 
our management typically 
requests. So far, he has spent 
about 10 hours building the 
database and coding the ASP 
framework. As with any 
homegrown application, this 
tool is far from finished, but 
relative to the time involved, 
we're very pleased with the 


| results thus far. It’s a great 


start to what we feel will be a 
great security tool. D 


WHAT DO YOU THINK? 


This week's journal is written by a real 
security manager, “Mathias Thurman,” 
whose name and employer have been 
disguised for obvious reasons. Contact him 
at mathias_thurman@yahoo.com, or join the 
discussion in our forum: QuickLink a1590 


To find a complete archive of our 
Security Manager's Journals, go online to 
@ computerworld.com/secjournal 
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SECURITY LOG 


because this tool is best used 
from the command line. | use 
Version 2.0; Version 2.1 in- 
cludes a few updates but re- 
quires Windows 2003 Server. 
~ Mathias Thurman 


Secure ADS 
Secure 

NetPro Computing Inc. in 
Phoenix has upgraded two 
components in its NetPro Se- 
cure Active Directory Lifecycle 
Suite that are designed to se- 
cure Active Directory installa- 
tions. Directoryinsight 1.5 
supports the tracking of 
changes in Active Directory 
with Hewlett-Packard Co.'s 
OpenView management soft- 
ware. DNSAnalyzer 3.5 offers 
enhanced support for DNS up- 
time and improved reporting 
capabilities. Both support 
Windows Server 2003. 


Sygate Secure 
Enterprise Updated 


Sygate Technologies Inc. in 
Fremont, Calif., has an- 
nounced Version 3.5 of its 
Sygate Secure Enterprise 
software, which is designed to 
ensure security policy compli- 
ance on internal and remote 
endpoint devices such as lap- 
ioe ; 
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Introducing a new era of secure, corporate business freedom 
and flexibility — Nokia Mobile Connectivity solutions. 


Employees throughout an enterprise want to be 
more mobile and productive — and this can be 
realized thanks to Nokia Mobile Connectivity solutions. 
COs and IT managers can provide the mobility and 
security of anytime, anywhere access to users — 
while empowering everyone from the CEO to field 
salesforce teams with the information needed to do 
their work where and when they choose. Nokia 
Mobile Connectivity solutions include a range of IPSec- 
and SSL-based client and gateway products that 
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provide secure, appropriate access to corporate 
email and applications. Enterprises will discover new 
levels of efficiency from their workforce, while 
giving them greater freedom to manage their business 
and personal lives. All solutions are easy to deploy 
and manage, are based on award-winning technology 
and are backed by Global Support and Services. 
So if you want greater working freedom that’s IT 
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Cisco Offers Switch 
Enhancements 


Cisco Systems Inc. has added two 
fixed-configuration switches to its 
Catalyst line that combine Gigabit 
Ethernet connectivity with intelli- 
gent switching services at the 
network edge. Designed to sup- 
port Gigabit Ethernet to the desk- 
top, the Catalyst 3750G-12S sells 
for $7,995. The 24-port 29706- 
24TS will ship later this month 
and sell for $5,495. 


Nextel Extends 
iDEN Coverage 


Nextel Communications Inc. has 
partnered with RadioFrame Net- 
works Inc. in Bellevue, Wash., to 
provide indoor coverage for its 
push-to-talk integrated digital en- 
hanced network (iDEN) cellular 
radios. RadioFrame extends iDEN 
coverage and provides 802.11b 
wireless LAN service through a 
series of remote radios, called 
RadioBlades, that are cabled to a 
central RadioFrame processor. 
The average range of a Radio- 
Blade is about 85 feet. 

The vendors didn’t disclose 
pricing details, but Reston, Va.- 
based Nextel said it would con- 
sider providing the system free of 
charge to large customers. 


RadioFrame’s 
RadioBiade 


Microsoft Upgrades 


Business Portal 


Microsoft Corp. announced the 
Microsoft Business Solutions 
Business Portal 1.2, which works 
with its Great Plains and Solomon 
ERP application suites. The soft- 
ware includes a human resources 
management self-service module 
and supports the distribution of 
reports written using Microsoft's 
FRx software. Pricing starts at 
$45 per user. 





Should 


ROBERT L. MITCHELL 


EARS OF frustrating experiences dealing 


with Windows systems once led me to the | 


conclusion that any Windows installation, 

over time, will inevitably move toward in- 

creasing randomness and disorder. This 
phenomenon — call it Wintropy — is less visible today 


because new versions of 
Windows do a better job of 
preventing complete sys- 
tem crashes. Problems still 
lurk, such as those pesky 
programs and patches that 
won’t work correctly or 
that create conflicts and 
then won't uninstall clean- 
ly. Or the legacy hardware 
and software that “kind of” 
runs, if you can just put up 
with a few quirks. 

Windows is certainly 
more reliable today. But with its tens 
of millions of lines of code and the 
continual piling on of new features, 
applets and services, Windows may fi- 
nally have gotten too big for its own 
good. I used to think that the bloated 
operating system would eventually im- 
plode under its own weight. Instead, 
the attackers who have been exploit- 
ing a seemingly endless supply of vul- 
nerabilities appear to be taking it apart 
from the outside. 

Microsoft stated some time ago that 
it’s making security a priority under 
its Trustworthy Computing initiative. 
The company is gradually reworking 
the code inside Windows, and the 
Windows XP code base was the first 
to be fully reviewed using tools such 
as Prefix, which was supposed to help 
eliminate those buffer overrun vulner- 
abilities we still keep hearing about. 

But why not reduce the vulnerabili- 
ties by paring down the complexity of 
Windows itself? Seems like a good idea 
to me, but in fact, Windows is going in 
the opposite direction. Each new ver- 
sion gets larger, not smaller. And each 
release adds new vulnerabilities. It’s 





difficult to defend a house 
while adding more doors. 
One reason Windows 


continues to bulk up is that | 


Microsoft has a hard time 


saying no to consumers. Its | 


traditional kitchen-sink ap- 
proach to adding new fea- 


tures has resulted in a situ- | stall the patches at all. And since those 


ation where Microsoft puts | 


its finger in the security 
dike only to have another 
leak spring forth. 

In a list of the 10 most 


was issued earlier this month by secu- 
rity engineers at Harris Corp., five ap- 
ply to Windows and its components. 
These include vulnerabilities in the 


| Distributed Component Object Model 


interface and remote procedure calls 
(both exploited by the recent Blaster 
worm and its variants), as well as is- 
sues with the NTFS alternate data 


streams feature, Instant Messenger and | 
HyperTerminal programs. Likewise, In- | 


ternet Explorer and Outlook continue 
to have their share of security prob- 
lems. Given all that, one can under- 


stand the cautious approach businesses | 


are taking with Web services, which 


What's worse, Microsoft still 
hasn't been fully enabling security 
defaults for fear of offending con- 
sumers. For example, the vendor in- 
cluded a firewall with Windows XP 
that wasn’t totally enabled by default. 
Why wasn’t it? Possibly because do- 
ing so might inconvenience consumers 
in activities such as online gaming. 
Thankfully, Microsoft has said it plans 
to change the default firewall config- 


Windows 
Think Small 


| uration after the Blaster debacle. 


Then there are the vulnerabilities 
in Windows features that end users 


| don’t even know exist. For example, 
| when Microsoft issued a fix for the 


Universal Plug and Play buffer overrun 


| vulnerability shortly after releasing XP, 
| many consumers may have ignored it 

| because they didn’t realize this feature 
| was enabled on XP systems by default. 


Microsoft’s response to security 
problems has been to quickly issue 
patches for its PC and server products. 
But large businesses are struggling to 
test and apply the patches quickly 
enough to stay ahead of attackers, and 
consumers can’t be relied upon to in- 


consumer machines are connected to 


| the same Internet on which corporate 
| IT does business, that’s a big problem. 


Perhaps this lesson finally hit home 


at Microsoft on Aug. 16, when ma- 


underrated security vulnerabilities that P chins taGctosh wikis the Glasiel weeds 


| targeted the Windows Update Web 


site for a denial-of-service attack. Mi- 
crosoft was lucky: The attack was un- 
successful because the worm didn’t 


| use the site’s primary Web address. 


All of this creates an opportunity for 


| security tool vendors, who are happy 
| to attack the symptoms, reacting to 


each threat or vulnerability with yet 
another virus update or patch. Even 
Microsoft wants to get into the securi- 
ty act, in essence profiting off the vul- 
nerabilities it has created. 

If the Internet is to be the conduit 
for e-commerce, it can’t be continu- 


yt | ously clogged by viruses, worms and 
| add yet another layer of security issues. | 


exploits to which the IT community 


| must react. Windows needs to get bet- 
| ter in this area a whole lot faster. Mi- 

| crosoft should pare down the bloated 
| Operating system and stop adding ser- 
| vices and features until it can demon- 


strate that it has the Windows security 
situation under control. D 


WANT OUR OPINION? 


For more columns and links to our archives, go to 
www.computerworld.com/opinions 
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Q&A 
Why Projects Fail 


Consultant Sue Young ex- 
plains why project status 
reports are so rosy and the 
difference between man- 
aging risk and preventing failure. Page 44 








Anticipating IT Needs 

In Pyramidal Steps 

Columnist Tom Pisello says com- 
panies can calculate IT spending based 
on a hierarchy of needs that helps 
categorize and assess what’s most 
important to the bottom line. Page 49 


‘Big Bang’ Works Best 


A new study suggests taking a bold 
approach to changing your supply 
chain. “Tinkering .. . doesn’t 
necessarily make the whole better,” 
says Bruce Blitch (right), CIO at 
Tessenderlo Kerley. Page 46 
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ClOs say college graduates 

aren't ready for corporate IT jobs. 
Now some progressive universi- 
ties are doing something about it. 
By Thomas Hoffman 


ASK CIOs TO GIVE the nation’s col- 
Cus leges and universities a report card 

on how they’re preparing the next 
generation of IT professionals, and they’d respond 
with a pretty dismal grade. 

“If I had to grade graduate programs on what 
they’re delivering, I'd give them a B-minus and a 
C-plus for undergraduate programs,” says George 
Voutes, enterprise technology programs manager at 
Deutsche Asset Management Technology, a New 
York-based division of Deutsche Bank AG. 

“We have to get away from strict programming and 
systems development,” says Voutes. “Those are skills 


DANIEL BAXTER 





to get into the field, but we have to train our technol- 
ogy people to think more like business people and 
arm them with strong communications skills.” 

A Computerworld survey of 244 IT professionals 
found that three quarters of them say academia isn’t 
preparing graduates for the IT jobs of today or the 
next few years (see charts, page 42). The survey, 
plus interviews with CIOs, indicated that the short- 
comings are in the areas of business skills, trou- 
bleshooting skills, interpersonal communication, 
project management and systems integration. 

And given the thousands of unemployed IT profes- 
sionals flooding the market who have at least a cou- 
ple of years of work experience, CIOs and hiring 
managers are being more selective than ever. 

“If you asked me this in 2000, my answer would 


| have been completely different. We don’t hire people 


into our company anymore straight out of college,” 
says Ken Harney, a vice president at Ness USA, a 
global IT consultancy in Hackensack, N.J. “There 
aren’t as many of those types of development proj- 
ects around today, and those jobs can be filled eas- 
ier” with people who already have business experi- 


| ence, he added. “I don’t need a person out of college 


to do that. It’s a whole new ballgame.” 

Indeed, during the height of the dot-com boom, 
companies were actively recruiting computer sci- 
ence and graduate students in the fall semesters of 
their final year — or earlier. Now “the recruiting 
process is taking longer,” and enrollment among 
MBA candidates with iS concentrations has 
dropped 50% since 2000, says Andrew Whinston, 
professor of information systems, economics and 
computer science at the McCombs School of Busi- 
ness at the University of Texas in Austin. “When the 
Nasdaq bubble burst, so did our enrollment. It’s a 
nationwide phenomenon.” 

That’s partly why McCombs and other top busi- 
ness schools such as MIT, UCLA's Anderson School 
of Management, Stevens Institute of Technology, 
Babson College, The Fox School of Business and 


| Management at Temple University and Ohio State 
| University’s (OSU) Fisher College of Business are 


forging closer ties with industry to ensure that 
they’re developing the kinds of skills being sought by 
the private sector (see “Hire Learning,” page 42). 

In addition to bringing in CIOs as guest speakers 
and making use of advisory councils where CIOs 
provide feedback on curriculum and market de- 
mands, universities are pushing harder to engage stu- 
dents in internship and co-op programs. They’re also 
devising programs for vertical markets such as IT in 
financial services and pharmaceuticals. 

But while academia is beginning to make some in- 
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THE STATE OF IT EDUCATION 


Are colleges and universities adequately 
preparing students for the IT jobs of today? 


Don'tknow/ 
ho opinion 


Base: 227 respondents 


Are colleges and universities adequately preparing 
students for the IT jobs of the next few years? 


Don't know/ 
no opinion 


Base: 226 respondents 


roads in broadening the business acumen of its stu- 
dents, some observers say it still has a long way to go 
to deliver on market demands. Part of the problem is 
that academia “views business the same way they 
view everyone outside of the academic community: 
as a funding source, not as a place of insight,” says 
Thornton A. May, a management consultant in Bid- 
deford, Maine, and a Computerworld columnist. 

Over the past 18 months, May has been working 
with a handful of academic institutions, such as 
OSU’s Fisher College of Business, to help them 
sharpen their focus on developing business skills for 
computer science students. 

At the university’s most recent annual advisory 
group meeting, CIOs and other 
C-level officers “were consis- 
tent in the opinion that we 
shouldn’t be teaching to a par- 
ticular technology,” says Stu 
Zweben, professor and chair- 
man of the computer and infor- 
mation science department at 
OSU in Columbus. Zweben 
says the advisory group “was 
very supportive” of OSU’s ap- 
proach to teaching undergrad- 
uate computer science majors 
about utilizing a software engi- 
neering methodology rather 
than teaching them about a 
particular programming lan- 
guage like Java or C++. 

More important, Zweben 
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estimates that a majority of OSU’s 1,000-plus grad- 
uate and undergraduate computer-science-related 
students have participated in an internship or co- 
op program with area businesses over the past 
three years. 

“Employers tell me they would rather have a stu- 
dent with a lower GPA and more work experience 
than someone with a perfect GPA and no work expe- 
rience who has had their nose in a book for four 
years,” Zweben says. Plus, students are “more inquis- 
itive” after they return to class from an internship or 


| co-op program, he says. 


MIT has had similar experiences when industry 


| executives are brought into classes to provide live 


presentations on business/technology problems 
they’ve solved. Typically, the executives will submit 
case-study materials for MIT students to read and 
analyze two weeks before each presentation. Once 
the executive presents to the class, students tend to 
ask “broader questions,” says Erik Brynjolfsson, a 
professor at MIT’s Sloan School of Management and 
director of the Center for eBusiness@MIT. 

Before each semester, MIT invites the center’s 30 
corporate sponsors to submit projects for teams of 
students to work on. The sponsors, which include 
General Motors Corp., Intel Corp. and MasterCard In- 
ternational Inc., provide teams of students — mostly 
MBA candidates but also some undergraduates — 
with business and technology problems to solve dur- 
ing a semester. Topics range from the challenges of 
implementing Wi-Fi to evaluating the benefits of a 
CRM project. The program “gives the students a lot 
of hands-on work with problems, project manage- 


| ment skills and involvement” with IT executives, 


says Brynjolfsson. Plus, the familiarity that’s created 
in the bond between students and sponsors can lead 
to jobs after graduation, he notes. 

University advisory groups have also helped to 
shape new course content, such as a class on market- 
ing information systems at the McCombs School of 
Business. And last December, Wellesley, Mass.-based 
Babson invited 15 area CIOs to review a proposed cur- 
riculum redesign for elective IT courses, says Kavin 
Moody, executive director of Babson’s Center for In- 
formation Management Studies. CIO feedback from 
these sessions have influenced course offerings, in- 
cluding an idea to tie Web design and e-business 


courses together “so students would have an apprecia- | 


tion of what went into Web de- 
sign behind e-business systems,” 
says Moody. The ideas were in- 
corporated into the curriculum 
within two weeks, he adds. 
With the increasing shift 
among U.S. companies to out- 
source IT work overseas or cre- 
ate international IT centers, 
Hoboken, N,J.-based Stevens In- 
stitute has “sprinkled” the topic 
of managing global IT opera- 
tions into its courses, says Jerry 
Luftman, director of the School 
of Technology Management. 
“It’s a matter of making stu- 
dents understand, How do you 
work in an outsourced environ- 
ment? How do you govern the 


’ 
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Here are examples of steps that schools have 
taken to help meet the IT skills requirements 
of the private sector: 


= MIT, Cambridge, Mass. Before each semester, 30 
companies that sponsor MIT's Center for eBusiness, in- 
cluding Intel, Cisco Systems Inc. and MasterCard, submit 
technology/business projects for student teams to work 
on. IT execs are also brought on campus to give presen- 
tations on IT/business problems they've resolved and dis- 
cuss their approaches with students. 


= Fisher College of Business at Ohio State University, 
Columbus A majority of the 1,000-plus students who are 
involved in computer-science-related studies have partic- 
ipated in internships and co-op programs with Ohio em- 
ployers over the past three years. 


= McCombs School of Business, University of Texas, 
Austin Advisory groups made up of business and IT ex- 
ecutives help shape the IT/business curriculum for the 
school. Recent feedback from the group led to the cre- 
ation of courses in marketing information systems and 
finance and technology. 


= Babson College, Wellesley, Mass. The Center for In- 
formation Management Studies is a forum for Boston- 
area IT managers, who attend half-day seminars on IT 
management issues. Sponsors of the program, which 
typically draws 90 IT managers to each session, include 
Allmerica Financial, Allied Domecq and Fidelity Invest- 
ments. Recent topics include business conditions that 
affect IT, security and privacy, and Web services. 


= Temple University’s Fox School of Business and 
Management, Philadelphia In addition to bringing in 
industry speakers to discuss problems they've resolved 
in a specific vertical industry, the school holds breakfast 
meetings four times a year at which ClOs discuss con- 
temporary topics such as enterprise integration. 


® Stevens Institute of Technology, Hoboken, N.J. It has 
recently established industry-specific areas of concen- 
trated study, such as IT in pharmaceuticals and IT in fi- 
nancial services. Embedded in the curriculum is a focus 
on managing multinational IT operations. 

~- Thomas Hoffman 


relationship between your company and the out- 
sourcing vendor? That’s an area that we cover in our 
classes,” says Luftman. In addition, students hear 
what it’s like to work for a vendor and how to be an 
IT consultant. 

Stevens Institute also now offers graduate IT man- 
agement programs with concentrations in the phar- 
maceutical and financial services industries. Ness 
USA — which is based in New Jersey, home to many 
pharmaceutical firms — is sending two of its work- 
ers to the pharmaceutical IT program. 

Deutsche Bank’s Voutes is also impressed with 
Stevens Institute’s direction. Says Voutes, “They’re in 
the top one or two [percent] for preparing [IT man- 
agement] leaders for corporate America.” D 
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point is required and is not included. Wireless Intemet use requires separately purchased Intemet serv ntract. ‘A standard WLAN infrastructure, other Bluetooth-enabled devices and a service contract 

communication. Wireless Intemet use requires a separately purchased service contract. Check with service for availability and coverage in your area. Not all Web content available. Microsoft and Wi 

other countries. Intel, intel Centrino, intel Inside, the Intel Centrino Logo, the Intel inside Logo, Pentium and Celeron are trademarks or registered trademarks of Inte! Corporation or its subsidiaries in the United States and other count 
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Why 


MANAGEMENT 


Projects 


There’s a difference between managing 
risk and preventing failure. 


a) 


Fail 
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started her first company at age 18 
and started ANDA Consulting in 1989. 
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Ever wondered why IT project status 
reports are so upbeat, managers con- 
tinue to fund losing efforts, and some 
projects are doomed from the start? 
Sue Young, CEO of ANDA Consulting in 
Colchester, Vt., thinks about that all the 
time. She talked with Computerworld’s 
Mitch Betts about preventing failure in 
IT projects and why risk management 
isn’t enough. 


Why are IT status reports often so rosy, even 
for projects in trouble? Because status 
isn’t reported in objective, observable 
terms. It’s often put in subjective terms 
like “percent done,” or “red,” “yellow” 
or “green.” As long as you allow re- 
porting to be done in subjective terms, 
you're going to get results that could 
be colored. Instead, you should look at 





“Is it done or not done?” where done 
has a clear definition. If you want to 
use colors, have a clear definition of 
what those colors mean. 

Another reason is that if your re- 
ward system values compliance — not 
rocking the boat, looking like you’re on 
schedule — and it doesn’t value the 
early detection of problems, it leads to 
rosy status reports. 

The third reason is fear, whether it’s 
fear of looking bad or losing your job. 
You're not likely to remove fear in the 
workplace, but if you change the other 
two factors — status reports that are 
objective and observable, plus a re- 
wards system that values the early de- 
tection of problems — then you'll have 
status reports that are reliable. 


Are some IT projects just plain doomed from 
the start? Yes, I still see that. Either the 
data required for the project doesn’t 
exist anywhere in the company, or the 
project is out of alignment with the 
business strategy, or the objective is 
simply unattainable. 


Why do managers continue to fund losing ef- 


| forts? One, they don’t have any empiri- 


cal evidence that the project can’t be 
salvaged. Two, they want to salvage 
what’s already been invested. The 
third reason is fear — fear of looking 
bad, fear of losing their job, fear of 
making a mistake. 


At what point do you decide to kill the project 
despite the sunk costs? When you know 
that it can’t possibly succeed. That re- 
quires knowing your definition of suc- 
cess. If you know that even if you pour 
more money into it, it’s not going to be 
worth the benefits that you get out of 
it, then it’s already failed, whether you 
keep going at it or not. 





Reality Check 


Many IT project crises are caused by 
an unrealistic schedule. How do you 
come up with a realistic one? Con- 
sultant Sue Young says there are 
seven often-overlooked things that 
must be done before you can come 
up with a realistic schedule: 


1. Nail down the scope and requirements. 
2. Prototype the biggest technical risks. 
3. Create a model of the user interface. 
4. Pay attention to industry-standard 
estimates for similar projects. 

5. Let each person create an estimated 
task schedule for his own work. 

6. Accept only observable, measurable 
status reports (such as “done” or “not 
done,” with a clear definition of done). 
7. Subdivide all the tasks until each task 
takes one to two weeks to complete. 


It sounds like a lot of work before 
even starting the actual project. “That's 
right. But if you want a realistic sched- 
ule, that’s the way to do it,” Young says. 
“To create a schedule before the scope 
and requirements are known is absurd, 
and yet we see it all the time.” 

In fact, doing steps such as prototyp- 
ing the most difficult technical portion 
of the project may show that the project 
isn't feasible, Young says. “It’s better to 
find that out upfront.” 


What's the best way to kill a project? I don’t 
know that there’s a best way. One way 
that seemed to work very well was that 
one company had a meeting first thing 
in the morning, fired the consultants 
and contractors, told the managers to 
figure out how to redeploy the re- 
sources, and everyone else was told 
they had the day off and to come back 
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tomorrow to find out what they’d be 
doing. It was clean and efficient. 


Are most project failures caused by technical 
problems, people problems or business prob- 
lems? People problems. Business and 
technical problems boil down to peo- 
ple problems. Calling something a 
technical problem is a convenient label 
to say “It’s not something I can han- 
dle.” If the server goes down, “it’s a 
technical problem.” Well, you either 
fix it or get someone to handle it. It’s a 
people problem. People solve prob- 
lems. People create problems. “It was a 
technical problem because the soft- 
ware was buggy.” Well, it was people 
who created buggy software or made 
the decision to buy the software. It’s 
the extent to which we take responsi- 
bility for solving problems that gets 
them solved. 

The myth of IT is that it’s about 
computers and technology. It’s not — 
IT is about people. 


So why do IT projects fail? No one pre- 
vented them from failing. We define 
success as a lack of failure and failure 
as a lack of success. If you eliminate 
the possibility for failure, the only pos- 
sibility you have left is success. 

You can try to do all the things to 
make something succeed and still be 
blindsided by something you didn’t 
notice, didn’t consider. So trying to do 
all the right things won’t necessarily 
ensure success. 

In risk management, we look at what 
might be a problem. In failure preven- 
tion, we look at what will definitely 
cause this to fail and let’s make sure it 
doesn’t happen. 

Compared to the causes of failure, 
risks are friendly. You can watch them, 
mitigate them, see if they happen. 
Risks have a probability. But there are 
definite causes of failure that, if you 
have them in your project, your project 
will fail, like objectives not aligned 
with business strategy or missing data. 
And if you have something that will 
definitely cause your project to fail, 
there’s only one thing left to do, and 
that’s to get rid of it. D 


FURTHER READING 


Software quality guru Watts S. Humphrey identifies 
five reasons why projects fail: QuickLink 29225 





Project estimates are often wrong because man- 
agers become swept up in “delusional optimism,” 
says the Australian Graduate School of Management's 
Dan Lovallo: QuickLink 39634 


The key to keeping projects on schedule is to require 
“microdeliverables” from each person every week, 
says columnist Paul Glen: 


QuickLink 39003 
www.computerworld.com 





Skeptical About 
Storage Interoperability? 


See Multi-vendor Interoperability at Work 
at the World’s Largest 
Storage Solutions Demonstration! 


INTEROP ERABIENN 
€& SOLUTIONS 


DEMO ici 
NETWORKING 


Uniting the World of Storage VVORLD 


October 27-30, 2003 ¢ JW Marriott Grande Lakes Resort ¢ Orlando, Florida 
Produced by: 


COMPUTERWORLD | 2, 


STORAGE NETWORKING INDUSTRY ASSOCIATION 


The Storage Networking Industry Association's (SNIA) multi-vendor Interoperability & Solutions Demo, taking 
place in conjunction with Storage Networking World, October 27-30, 2003 in Orlando, offers you the opportu- 
nity to see interoperability in a collaborative and vendor-neutral setting. Whatever your needs - whether it's 
managing more storage with fewer resources, looking for infrastructure needs to support disaster recovery 
strategies, or wondering if you are ready for iSCSI and SMI-S - this is the place to see feature sets, supported 
solutions and interoperability. 


To register to attend Storage Networking World and see the Interoperability & Solutions Demo, 
visit www.snwusa.com 
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When it comes 
to supply chain 
improvements, 
bold action yields 
a bigger ROI than 
incrementalism. 


By Peter A. 
Buxbaum 





MANAGEMENT 


AST YEAR’S MERGER of Hewlett-Pack- 

ard Co. and Compaq Computer Corp. 

gave rise to more than just a bigger 

company. It also presented an opportu- 

nity for the combined corporation to 

streamline processes and cut costs, es- 
pecially in the supply chain. 

The new HP delivered $3.5 billion in reduced costs 
one year after the merger, the company says. Of that, 
$1.5 billion was associated with supply chain reduc- 
tions. Could such impressive results have been 
achieved without going through a huge and tumul- 





tuous merger? 
A paper published recently by the manage- 
ment consultancy Booz Allen Hamilton Inc. 
suggests that companies taking bold ap- 
proaches toward revamping their supply 
chains are likely to achieve better results than 
those that merely tinker with them. Those conclu- | 
sions seem obvious to many supply chain and IT 
practitioners. But not every supply chain problem is 
a candidate for the “big-bang” approach, and most 
companies require some cataclysmic event — in HP’s 
case, the merger coinciding with a high-tech down- 
turn — in order to make it happen. 
Booz Allen’s survey of 200 industrial companies in 
North America, Europe, Asia and Latin America found 
that companies willing to “break constraints” — con- 
sultantspeak for transforming supply chain manage- 
ment into a multidisciplinary process that cuts across | 
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departmental lines — achieve 36% to 55% more sav- 
ings than companies willing only to make adjust- 
ments within their existing supply structures. Why 
does revamping a supply chain yield better results? 

A company’s supply chain is a multifaceted entity, 
often including a myriad of transportation, ware- 
housing and procurement relationships, practices 
and systems, as well as a company’s vendors, cus- 
tomers and distribution systems. Tinkering with the 
supply chain might change just one or two of those 
elements, such as renegotiating trucking contracts or 
relocating distribution centers. Revamping the sup- 
ply chain involves re-examining and completely opti- 
mizing the process from A to Z. 

“Supply chains have typically grown organically 
and without comprehensive thought to consistency 
or the interrelated nature of the process,” says Bruce 
Blitch, CIO at Tessenderlo Kerley Inc. (TKD, a chem- 
icals company in Phoenix. “Tinkering [with] a few 
links doesn’t necessarily make the whole better. In 
fact, it may even make it worse by focusing the strain 
on the weakest links. You can’t expect revolutionary 
change from an evolutionary process.” 

In the case of HP, the company consolidated 40 
separate geographical and product-line supply sys- 
tems into five generic supply chains based on com- 
mon attributes, according to Dick Conrad, HP’s se- 
nior vice president for global operations and supply 
chain services. HP’s formerly decentralized supply 
system and Compaq’s relatively centralized model 
were discarded in favor of a pragmatic approach 
based on individual supply chain needs. And 70% of 
the company’s logistics providers were replaced. 


Catalyst Required 

“Major improvement in an organization’s business 
processes usually requires a catalyst,” says Blitch. 
TKI’s catalyst came in the form of an SAP R/3 imple- 
mentation five years ago. 

“Implementation of SAP as an enterprise informa- 
tion backbone meant that we had a chance to review 
business processes from a macro perspective, as op- 
posed to the usual day-to-day basis,” Blitch explains. 
“We sat down as a group and talked in a quiet envi- 
ronment in a room full of whiteboards. Once we got 
the whole supply chain process down, we saw that it 
was a spider web with so many interconnecting 
pieces that there was no way to deal with one seg- 
ment without bringing it all together.” 

So TKI consolidated its customer service, distribu- 
tion and inventory management functions — 
formerly handled by separate departments — 
under a single head. Blitch says the benefits of 
that integration included greater visibility of 
inventory, reduction in transportation assets 

and costs, and an improved ability to react to supply 
chain changes. “Disruptions that formerly would 
have been a challenge to overcome, such as product 
outages, customer requirement changes or rail carri- 
er transportation disruptions, are now dealt with by 
a single organizational entity,” he says. 

The revamping of HP’s supply chain likewise took 
place in an atmosphere of quiet contemplation. “Pri- 
or to the merger, we picked several senior executives 
from both companies, exonerated them of their for- 
mer duties, and quarantined them in a ‘clean room, ” 
recalls Conrad. That group’s accomplishments in- 
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What Works, 
What Doesn’t 


Booz Allen Hamilton’s study says the supply chain 
management field — at age 21 — “continues to fall 
short of its great promise.” The firm’s survey of 200 
industrial companies identifies the following issues: 


* Executive participation is important. In companies 
where responsibility for supply chain management resides be- 
low senior management, annual savings in manufacturing 
costs are just 55% of what they are when the function is inte- 
grated with business strategy at the CEO level. 


i “Breaking constraints” (a major overhaul) yields bet- 
ter results. Companies willing to reorganize the entire supply 
chain achieve savings that are 36% to 55% greater than 
those of companies willing only to make adjustments. 


« Commitment is key. Companies that classified their sup- 
ply chain management efforts as “significant” or “Herculean” 
reported annual purchasing savings that were 26% higher 
than those of companies with lower levels of commitment. 


Technology alone isn’t the answer. Nearly half (45%) 
of the companies said their supply chain IT systems have 
failed to live up to expectations. Human insights, creativity, 
dedication and patience are also required for success. 

- Peter A. Buxbaum 





“You can’t expect revolutionary change from an evolutionary process,” says Bruce Blitch, CIO at Tessenderlo Kerley Inc. 


cluded identifying the two companies’ common parts 


and lowest-cost suppliers, which allowed the merged 
company to take advantage of lower prices and save 
$300 million. 


‘Burning Platform’ 

Other companies don’t have the luxury of meditating 
on the supply chain in a rarefied atmosphere. “From 
what I have seen, major changes come when a busi- 
ness is in crisis from a shareholder value perspective 
or when it is in danger of losing a customer,” says 
Robert Benny, director of systems and process inte- 
gration at Motorola Inc.’s Semiconductor Products 
Sector, a $4.9 billion annual business based in Austin. 
“When the business needs to be turned around, it be- 
comes imperative to do business differently. 

A major crisis, or “burning platform,” as Larry 
Lapide, an analyst at AMR Research Inc., puts it, 
forces a company to focus on a particular issue. For 
example, “some companies got burnt as a result of the 
West Coast dock strike last year,” Lapide says. “They 
realized they could no longer count on their supply 
from the Far East. They needed to figure out how to 
operate their supply chains without disruption.” 

1 strategic issue arises, notes Benny, the cor- 
sutive level is galvanized to drive major 
ge from the top down. CEO participation in sup- 
ply chain transformation was one of the key success 
factors identified in the Booz Allen report. 

Big-bang supply chain projects may produce a bet- 

ter return on investment, but the reality is that in 
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tough times, CIOs seek smaller victories 

Because of the economic downturn, buyers have 
been less receptive to large-scale supply chain IT 
projects thz 
and internal change, says Romal 
Framingham, Mass.-based IDC. 
there 
that fix immediate problems and have a quick ROI 

Benny says that he’s a “big supporter of tl 
of breaking constraints” and that such 
ate “a great deal of exciten 
but he adds that not every pr 
portunity for that kind of project. ‘ are many 
and-Aid- 
type projects can add significant value,” he says. 
Smaller projects often focus on specific custo 
needs and requests. 

Lapide says there’s a trade-off between the big- 
bang and Band-Aid approaches. 
savings of 5% to 15% 
tions for transporté 
agement,” he says. ‘ it achie 
partmental goals might defeat company 
ing transportation costs might be bad cu 
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transportation management program 
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ments,” he says. “Putting a new business process in 


place means changing people’s jobs and getting them 


comfortable with that. It won’t we ess you put a 


great deal of effort into change manag ent.” 
HP’s Conrad acknowledges that the 
appropriate for eve 


balance the need for 


ang isn’t 
time and place. “You have to 
fundamental char 1inst 
meeting customer requirements,” he says. “You can’t 
disrupt customer service or detract from revenues 
for the sake of revamping the supply chain. 

In the absence of optimal conditions, Co sug- 
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Get IT Delivered. 


News analysis, commentary and 
straight to your desktop. 


To remain at the forefront of industry, today’s 
IT leaders need easy access to strategic 
information, news analysis and advice. 
Computerworld delivers with coverage that 
emphasizes and advocates for the user 
perspective, providing balanced, objective 
reporting on a wide range of technologies, 
business trends, career topics and man- 
agement issues. Computerworld gives you the 
tools you need to succeed—to evaluate and 
implement technology solutions that put you 
one step ahead of your competition. 


practical tips sent 


With a cutting-edge suite of more than 25 
e-mail newsletters, we ensure that you have 
access to the information you need in a way 
that is most useful to you. Whether it’s 
Computerworld Daily, issued the morning and 
afternoon of each business day, or weekly 
newsletters covering the technology spectrum, 
there’s no better way to stay in tune, in touch, 
and on top of today’s ever-changing world of 
IT than with Computerworld. 
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Travel Web Site 
Names New CIO 


MetroGuide.com 
Inc., a travel and 
hospitality Web 
site based in Hol- 
lywood, Fia., has 
hired David Lefa- 
vor, 55, to fill its 
new executive- 
level CIO position. He was previ- 
ously vice president of IT opera- 
tions at market research firm In- 
formation Resources Inc. and has 
many years of experience work- 
ing in IT management and sys- 
tems architecture at United Air 
Lines Inc., Galileo International 
Inc., Westin Hotels & Resorts and 
Doubletree Hotels. As CIO at 
MetroGuide, Lefavor will lead IT 
teams in application develop- 
ment, Web site management, 
systems infrastructure and inter- 
nal business systems. 
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New Career Site 
Serves Coders 


JobLink Systems Inc. in Deer- 
field, Ill., has launched a career 
Web site for people in the soft- 
ware industry. The site, Soft- 
wareJobLink.com, provides links 
to job postings on the Web pages 
of leading vendors such as EMC 
Corp., Siebel Systems Inc. and 
Sun Microsystems Inc., as well 
as other sources such as Soft- 
wareCEO.com. 


IT Job Market 


Looking Brighter 


Job seekers are spending less 
time looking for jobs, and em- 
ployers are more interested in job 
candidates who have specific 
skills than in those with broad 
industry experience, according to 
a report from executive outplace- 
ment firm Challenger, Gray & 
Christmas Inc. in Chicago. It rec- 
ommends that job candidates 
emphasize their professional ac- 
complishments at previous jobs, 
technical skills and decision- 
making abilities and delete the 
“personal goals” section on their 
résumés. 





_ MANAGEMENT 


icipating 


TOM PISELLO 


IT 


CoMPaTERWORLD age 25,2003 AQ) 


Needs 


Pyramidal Steps 


HAT’S the most important IT con- 
sideration for 2004 budget planning? 
That depends on where a company 
stands in its IT maturation and what 
it’s trying to achieve. 


There’s a progression in 
IT spending priorities, 
where basic IT needs must 
be met before more sophis- 
ticated initiatives can be 
pursued — much like in 
human development. Un- 
derstanding this progres- 
sion, and its opportunities 
and risks, can help IT deci- 
sion-makers identify the 
investments that will deliv- 
er bottom-line impact and 
competitive advantage. 

Most companies have the 
IT basics: a computing in- _ 
frastructure such as computers, print- 
ers and networks. At this level, mainte- 
nance and cost control are the priori- 
ties for these commodities, which de- 
liver very little competitive distinction. 
By building on this infrastructure, more 
highly developed needs are emerging 
for companies to achieve advantage 


through business-process optimization | 


and information management. Today’s 


emerging IT needs will give rise to the | 
applications. This nuts-and-bolts in- 


next level of need — each more strate- 
gic than the one before. 

This concept draws on Maslow’s 
hierarchy of needs, which asserts that 
people are motivated by unsatisfied 
needs and that certain basic needs re- 
quire satisfaction before higher ones 
can be addressed. Lower needs in- 


clude air, water, food and sleep. Higher | 


needs include love, self-esteem and 
self-actualization. When each level is 
satisfied, higher-level needs emerge. 

How can CIOs apply this theory to 
making IT investment decisions? 
Maslow’s theory may offer insight into 
a new pattern for setting priorities, 


where new levels establish 
a company’s focus for in- 
vestment and competitive 
advantage, and prior invest- 
ments are treated as a com- 
modity — a utility managed 
for cost savings. 

For IT, this means that 
basic levels of needs have 
been met and that the play- 
ing field has moved to a 
higher plane, where the in- 
vestments are substantial, 
innovative and crucial for 
corporate success. 

The IT hierarchy of 


| needs has four levels of evolution and 


investment, from basic computing as- 

sets to full-fledged information war- 

fare. The pyramid looks like this: 
Computing infrastructure. The prior era 


| of IT was focused on the infrastruc- 
| ture needed to boost productivity by 


improving efficiency and reducing 
overhead. Trillions of dollars have 
been spent to implement data centers, 
networks, PCs and personal/business 


frastructure has become a commodity. 
Internet and enterprise software. The ad- 
vent of the Internet and enterprise 
software moved the strategic focus of 
IT investing upstream to enhance pro- 


| ductivity across the entire value chain, | 


from customer-facing applications and 
supply chain integration to business- 
process optimization. These needs 


| aren’t yet fulfilled in every company, 


but the software is starting to become 
a commodity, as evidenced by the re- 


information in IT, rather than the tech- 
nology, and on turning that informa- 
tion into revenue. Today’s true innova- 
tion is providing the means for main- 
taining and extending the value of a 
firm’s most valuable resources: its 
knowledge capital. That means man- 
aging the rapidly exploding accumula- 
tion of scientific, research, customer, 
engineering, property and intellectual 
assets with data warehouses, enter- 
prise portals, analytics and business 
intelligence. Companies that can apply 
such knowledge will achieve competi- 
tive advantage over the next decade. 

Information warfare. Once the basics of 
knowledge capital management are 
covered, the focus will move from re- 
active information analysis to the 
proactive control of information as a 
competitive weapon. The battlefield of 
this futuristic era of information war- 
fare is ambiguous at this point, but it 
takes its lead from the military. Solu- 
tions will enable information distor- 
tion or denial and the countermeasures 
to fight such attacks. Expected compo- 
nents include hacker warfare, where 
computer systems are attacked; psy- 
chological warfare, where information 
is used to change the minds of friends, 
neutrals and foes; and economic infor- 
mation warfare, which involves block- 
ing or channeling information to pur- 
sue economic dominance. 

The IT hierarchy of needs can help 


| companies categorize investments and 
| assess what’s most important. Under 


this model, the lowest total cost of 
ownership is the most important con- 
sideration for technologies at the com- 
modity level. Where innovation still 
reigns — at the higher levels — value 
matters most, and competitive differ- 
entiation can be gained with the right 
projects and spending plans. B 





cent consolidations in the ERP market. | WANT OUR OPINION? 


Knowledge capital management. The 
newest IT battleground focuses on the | 


For more columns and links to our archives, go to 
www.computerworld.com/opinions 
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IT Careers in Consulting 


raduating college seniors rank consulting 
G: the number two career of choice, behind 
entertainment/media, according to 
Communications annual survey. That's good news for 
consulting firms, large and small, which are hiring new 


the Universum 


graduates and seasoned IT professionals. 

Despite major downsizing that applied to every job 
category from 2000 to 2002, there are several strong 
consulting opportunities in 2003. Utilities, transportation, 
manufacturing and defense/security are all categories 
where consulting expertise will be sought out in the 
coming months. Rapid change is needed to meet new 
challenges, as well as longer term investments in 
information technology. 

While consulting was hard-hit by the economy and by 
corporate leadership issues, firms were restructuring and 
refocusing priorities. Accenture became an independent 
group of consultants as of January 2001, while 
PricewaterhouseCoopers sold its business consulting unit 
to IBM. Deloitte Consulting remains part of Deloitte Touche 
but operates independently. JDEdwards is merging 
with PeopleSoft. 

The larger consulting firms are hiring in a range of 
areas, from the information technology that enables them 
to serve clients to the actual customer-facing consultants. 
For instance, at Accenture, the Technology Solutions group 
is home to application, software and architecture 


development expertise, while business consultants 
provide the link to clients between in-depth business 
knowledge and how technology can be applied to meet 
that specific business sector's challenges. 

According to Laurie Ryan, spokeswoman for Accenture 
which currently employs 75,000 worldwide, the company 
hires both from college campuses and from among more 
seasoned professionals. Accenture lists job openings in 
areas ranging from development and architecture to Tier 3 
support and services delivery. 

While specific 2003 hiring numbers for the major 
consulting groups aren't being provided, the larger firms 
are hiring a strong mix of experienced IT professionals and 
new IT graduates. Small firms are also hiring, sometimes 
combining consulting with offshore and domestic outsourcing. 


Cognizant Technology Solutions, based in New York, is 
among those serving as a conduit to offshore resources for 
the more routine development and support functions. Larry 
Gordon, Cognizant's vice president for marketing, says the 
firm hires about 30% of its IT professionals in the United 
States. Among them is a cadre of business consultants who 
have experience with profit/loss operations and who have 
in-depth business acumen in one of the company’s vertical 
markets. He lists these, specifically, as banking, 
retail/consumer products, insurance and healthcare 
insurance. In addition to client partners and practice 
leaders, the company is looking for experts in transaction 
and payment solutions. 

Geographically, the opportunities continue to center on 
Boston, New York, Virginia and North Carolina in the East, 
Chicago and Dallas in the central part of the country and 
Seattle, Los Angeles and San Diego in the West. 


For more information about IT Careers advertising, 
please contact: 

Nancy Percival 

Vice President, Recruitment Advertising 

800.762.2977 

500 Old Connecticut Path 

Framingham, MA 01701 

Produced by Carole R. Hedden 





Programmer Analyst needed for 
IT consulting firm located in 
Burlington, VT Job duties 
include: Analyze, develop, test 
& document client server based 
computer applications for clients 
located through the U.S 
Evaluate user requests for new 
or modified programs Use 
Oracle, SQL Server, Business 
Objects, & DB2 to perform 

Work as part of a tea 

cirect supervision 
must have B.S 
Computer Science, Bu 

Math or Engineering. Ap; 

must also have 2 yrs. exp 

job duties described above or 
any computer related occupa- 
tion. Must be willing to tem 
porarily re-locate to client sites 
at employer's expense 
40hrs/wk, 9:00 am-5:00 pm, M 
F, $48,131/yr. Send res: 
cover letter to Job No. 6 
Vermont Dept. of Employment & 
Training, P.O. Box 488 
Montpelier, VT 05601-0488 


degree 


Seeking qualified applicants for 
the following positions in 
Memphis/Collierville ™ 
Senior Business Application 
Analyst Serve as liaison 
between technical developers 
and users/customers. Require- 
ments: Bachelor's degree or 
equivalent* in computer science 
mathematics, statistics, busi- 
ness, international management 
or related field plus 5 years of 
experience in analyzing busi 
ness systems and developing 
technical automated solutions 
Experience with distributed com: 
puting desktop operating sys 
tems and tools also required 
*Master’s degree in appropriate 
field will offset 2 years of gener- 
al experience. Submit resumes 
to Sibi George FedEx 
Corporate Services 1900 
Summit Tower Bivd., Suite 1400 

FL 32810 EOE 


S iS, Inc. is a global infor- 


mation technology services 
company and it has multiple Job 
openings for the following posi- 
tions at its corporate office in 
Sacramento as well as Project 
sites throughout the 
United States 


* Applications Programmer 
abase Analyst 

* Software Engineers 

+ Systems Analyst 

* Network Analyst 

+ IT Project Managers 

* Business Analyst 

+ Sales Engineer 

+ Programmer Anaiyst 

+ Sales Manager 

+ Database Administrators 

+ Market Research Analyst 


Minimum requirement: Bach- 
elor’s degree or equivalent and 
one year experience in the job 
offered. All positions may involve 
relocation to project sites 


Submit detailed resume and 
position applied for to 


Attn: Sanjay Saxena 
5000 Windplay Drive Suite 5 
El Dorado Hills, CA 95762 


COMPUTER 
PricewaterhouseCoopers 
GRMS practice group has 
opportunities available for expe- 
rienced professionals in the 
design and implementation of 
Security Controls. Positions 
require a bachelor's degree 
(master's preferred) in CS, CE 
or related field and 1 to 5 yrs of 
related exp Job site/loca 
tion: NY, NY. Interested candi- 
dates please reference job code 
4ZFMAJ & fax resume to 
J.Street at 312-298-8246. No 
phone calls please. Employer 
will only consider applicants 
authorized to work for any 
employer in the U.S 


NC Eye Care center seeks 
DBA/Programmer | to assist 
widesign, development, opera- 
tion, maintenance of database 
systems utilized by org.; provide 
technical direction ommen 
dation & advice to users con- 
cerning database administration 
under mangr's direct supervi- 
sion; assist w/network adminis- 
tration, security, enforcement of 
company wide policies, proce- 
dures for data entry, systems 
integration/automation of reports 
evaluation of new features of 
systems for development feasi- 
bility. Min. req: Bachelor's in 
Electronics Engineering/Comp 
Science & 3 mos in job/job relat- 
ed exp. including C/C++, Visual 
C++, Visual Basic, Sun Solaris 
Script, DOS Batch files, Oracle 
Forms/Reports, PowerBuilder 
SQL*Plus, PL/SQL, Access 
VBA, Excel Macro, Oracle DB. 
Progress DB, MSSQL, Windows 
(95/98/NT/2000/XP SunOS 
Solaris, SCO UNIX, ClearCase 
TCP/IP, Database Adminis- 
tration (DBA), UNIX Adminis- 
tration, Software Configuration 
Management, Project Lead 
Resumes to Jose Natal, 2325 
Sunset Ave., Rocky Mount, NC 
27804. No calls. EOE 


Junior Programmer: Assist in 
design/development conversion 
software programs. Analyze & 
interpret specifications & info 
from airlines, create data conver 
sion programs, fix software bugs 
& make program modifications 
utilizing Power Builder and 
Oracle. Export & import Oracle 
databases through remote 
access and PC Anywhere access 
programs. Apply updated pro: 
gram releases of company's soft- 
ware to customer databases 
Bachelor in computer science or 
related 1 yr. exp. Competitive 
Salary. 8AM-5PM. Resume to 
Henry Parra, VP, TRAX USA 
Corp., 2665 S. Bayshore 
#501, Coconut Grove, FL 33133 
(305) 357-4488. 


COMPUTER PROFESSIONALS 


Opportunities for: 

* PROCESS CAPABILITY 
ANALYST 

* QC ANALYST 

* WEB ARCHITECTS, 
DEVELOPERS 
SYSTEMS ANALYSTS 
WEB GRAPHIC DESIGNERS 
NETWORK ENGINEERS 
PROGRAMMER/ANALYSTS 
SOFTWARE ENGINEERS 


SKILLS 

* COLD FUSION + SPECTRA 

* ORACLE + VISUAL BASIC 

* VISUAL C++ * SIEBEL * ASP 
* COM, DCOM « JSP * HTML 

+ JAVA, JAVA BEAN + EJB JAVA 
SERVLETS » WEBSPHERE 

+ IBM MQ SERIES + XML,UML 
* MTS + CLARIFY + PERL 

+ OBJECTPERL * SPYPERL 

* SMALLTALK + PL/SQL 

+ VISUAL AGE + COBOL, SPL 
UNIX 


Visit our website @ 
www.computerhorizons.com 


Attractive salaries and benefits 
Please forward your resume to 
H.R. Mgr., Computer Horizons 
Corp., 49 Old Bloomfield 
Avenue, Mountain Lakes, New 
Jersey 07046-1495. Call 
973-299-4000. E-mail: jobs@ 
computerhorizons.com. An 
Equal Opportunity Employer M/F. 


Application Developers needed 
at unanticipated client sites to 
perform db performance analy- 
sis, schema re-dsgn & normal- 
ization, tuning issues by lever- 
aging complex JDBC calls to 
stored procedures, & dvip 
scripts in LoadRunner, 
WinRunner & XRunner. Dsgn & 
impimt web dispatcher based 
on Struts Web Application 
Framework & dsgn s/ware & 
h/ware re-architecture. Send 
resume to: Global Consultants, 
Attn: Hireme, 25 Airport Rd, 
Morristown, NJ 07960 


Sr. Systems Analyst - Lawren- 
ceville, NJ. Lead turnkey project 
to dsgn, dvip & maintain XML/ 
Internet based systms for envi- 
ronmental regulatory agencies 
Applying environmental busi- 
ness logic to lead s/ware life 
cycle dvipmt incl user reqmt 
analysis, systms analysis, dsgn 
coding, testing & impimtg 
applics under Microsoft .NET, 
using XML, XML Schema, Web 
Services, & end-to-end messag- 
ing level security technology. 
Research innovative s/ware 
applics, & conduct feasibility 
study. Must possess: MS in 
CompSci, Environmental Engg 
or Chemical Engg with min 2 yr 
of exp in s/ware dvipmt. Strong 
skills in XML, XML Schema, C#, 
Microsoft.Net, ASP.NET, Web 
Services Technology, & Biz Talk 
Server. Send resume wisalary 
reqmt to HR Mgr, Enfotech, 11 
Princess Rd Unit A, 
Lawrenceville, NJ 08648. Refer 
to job#SYS018 


Database Systems 
Analyst/Project Programmer 


Uses various database systems 
management tools to program 
Oracle procedures and triggers 
with PL/SQL to insure that gene 
ontology data is capable of 
being integrated and uploaded 
into RGD and related 
Bioinformatics database man- 
agement systems. Uses princi- 
ples of database management 
to create PERL Scripts for auto- 
matic database files as well as 
developing enhanced search 
reports and tools for impiemen- 
tation and related web sites. 
Requires Master's Degree in 
Computer Science or) 
Computing. Send resume, no 
calls, to 


Medical College of Wisconsin 
Attn: Employment Office - 
JMC0825 
8701 Watertown Plank Rd. 
Milwaukee, WI 53226 
Fax: 414-456-6502 


Computerworld + InfoWorld + Network World + August 25, 2003 


Software Engineer (Atlanta, GA) 
Provide product leadership for 
complex software development 
projects. Manage definition of 
Product requirements and cre- 
ation of design documentation 
leading to coding and testing of| 
software application for retail 
industry. Review development 
artifacts from project members 
for quality characteristics and 
adherence to development 
Standards and corporate meth- 
odology. Manage creation of 
new feature documentation suit- 
able for use by customers and 
internal sales, marketing, train- 
ing and support depts. Review 
existing programs or formulate 
logic for new systems using 
structured Programming or 
object oriented analysis and 
design techniques. Require- 
ments: Master's or equivalent 
degree in Computer Science. 
Math or related field, plus 2 yrs 
Software development experi- 
ence. Competitive salary 
offered Apply on-line at 
www.retek.com/apply. Be sure 
to include ComputerWorld as 
the source code. 


Z3 Technologies, inc. a fast 
Growing software firm is look- 
ing for a Computer consultant 
Shouid have bachelor's degree 
in computer science/related 
field with 2 years experience in 
Requirement Analysis, Design 
and development. Resolving 
the technical issues. Progra- 
mming in Cognos: impromptu, 
PowerPlay, IWR, MSSQL, 
PLSQL, DB2, Win2k, WinNT, 
and skilled in Oracle; 

We accept foreign education 
equivalent of the degree, or the 
degree equivalent in education 
and experience. Send resume 
and covering letter to: Z3 
Technologies, Inc 1803 
Shepherd Ct 335 Waukesha 
WI-53186; 
resumes@z3tech.com 
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THE WORLD’S BEST 
IT TOOL IS IN 


YOUR HANDS 


THE WORLD’S BEST 
GENO ee wee 
OUR STII 


WHAT ELSE WOULD YOU EXPECT 
FROM THE ONE AND ONLY CAREER 
RESOURCE FOR READERS OI 
COMPUTERWORLD, 
INFOWORLD AND 


NETWORKWORLD? 


COME ON, 
RECRUIT OUR READERS 


AND YOU'LL RECRUIT LESS OFTEN 


CHECK US. OUT ATE: 
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Z3 Technologies, Inc. a fast 
Growing software firm is looking 
for a Computer consultant 
Should have bachelor's degree 
in computer science/related field 
with 2 years experience in 
Requirement Analysis, Design 
and development. Resolving the 
technical issues. Programming 
in Oracle Applications: GL, AP, 
AR, FA, PO, INV, OM, CM, BOM 
modules versions 11/1.1i., Unix 
Sun Solaris and skilled in Oracle 
Reports, Forms, Discoverer. We 
accept foreign education equiva- 
lent of the degree ne degree 
equivalent im education and 
experience. Send resume and 
covering etter to 
Technologies ' 

Shepherd Ct 335 Waukesha 
WI-53186 


resumes@z3tech.com 


Software Engineers and 
Programmer Analysts for 
Software company in 
Camp Hill, PA. All posi- 
tions require Bachelor's 
degree in Comp Science: 
Computer Engineering or 
related field and 1-3 years 
related experience. Send 
resume to Rashi 
Information Services, Inc 
214 Senate Avenue 
Camp Hill, PA 17011 
Attn: Ravi Jaganmohan 


Trading Systs Dvipr wanted 
by Investmnt & Trade Support 
Services Co in Manh. Build 
derivative models for trading 
write financial systs reports 
for products including fixed 
income equity, futures 
options, derivatives &/or for- 
eign exchange; dvip trading 
appls; design 

mngmnt > 

Comp Sci & 2yrs exp in job 
offered req. Respond to 
CT/HR Dpt, PO Bx 4241 
GCS, NY 10163 


System/Programmer 
wanted by Mai 
a Bu Ss e 
use Java, SQL 
siness analysis and 
must have 


iness enterprise, is 
looking for Sales Engineer with 
direct ac t responsibility 
selling custom manufactured 
electronic mponents. Must 
have BS with exp 
lations Please 
team@stac Orr 


Programmer Analyst. Dev cus- 
tom software for Co. using SAP 
& Eagle Pace Support & 
enhance existing apps. & data- 
bases. Design & implement new 
database schemas, new scft- 
ware apps 

apps. using IT tools inc 
ABAB/4 BAPIs, RFC, BDC 
Piumtree Visua Interdev. 
Embarcadero ER Studio 
SysAdmiral, VBScript, MTS, MS 
SQL Server & COM/DCOM in 
MS environment. Req: Bach- 
elors in mp. Science or 
Comp. Eng. 40-hr.wk. Job 
Interview Site: Boston, MA 
Send resume to 
recruit@Smallboard.com 
PMB#121 18 Washington 
Street, Canton, MA 02021 


IT|Careers 


Silverman Law Firm seeks appli- 
cants for the position of System 
Administrator in Englewood, CO 
to engage in moderately com- 
plex tasks involving software 
configuration management and 
network systems administration 
for law firm. Requires experi- 
ence in design of software con- 
figuration management and 
implementation procedures 
design, implementation and sup 
port of computer network and 
communications 

and maintenance and support of 
computer hardware assets. 
Requirements also include a 
working knowledge of configura: 
tion, management and imple 
mentation procedures for FMI- 
Tucans, CLS and commer. 
cial legal collection software 
packages. Respond by resume 
to David Silverman erman 
Law Firm, 13111 E jarwood 
Ave., #340, Englewood O 


80112 


Software Engineer: Sioux Falls 
SD. Research, design & Dev 
omp. soft syst, in conjunction 
with hardware product dev 
Consult with hardware eng & 
other eng staff to evaluate inter- 
face between hardware & soft- 
ware, & operational & perfor 
e req's of ail system 
de technical guidance 
client projects. W use 
NT/95, Unix, AS/400, dev 2000 
ABAP/4 Oracle RDBMS 
B/400, OS/400, SAP, Visual 
Basic MAPICS (MRP 
Workstream, Auto CAD, MS 
Access, DOS. Req'd Bach in 
eng/math/CS or MIS & Syrs exp 
or masters + 2 yrs exp on the job 
or as a Programmer Ana' 
T Consultant. $70,000/yr; SAN 
5PM, MON-FRI, 40hrs wk; send 
2 resumes to: South Dakota 
One-Stop Career Center, 811 E 
10th Street, Sioux Falls 
57103-16500 Te 3 
5300; Fax: (605) 367-53 


PROGRAMMER/ANALYST to 
design, analyze, code, debug 
implement and maintain e-com- 
merce applications software and 
relational database for automo- 
tive industry using object orient- 
ed techniques, C/C++, dBase 
Lotus 1-2-3 and HTML; design. 
develop and support internet 
based e-commerce applications 
using Java, Visual Basic and 


Oracie. Require: B.S in 
Computer cience/Mathe- 

s. Competitive salary and 
benefits, 40-hour week, M-F 
8:30 am to 5 pm. Apply with 
resume to: President, SKCO 
Investments Corporation, 7354 


Airport Bivd., Mobile, AL 366( 


Technical Consultants needed 
at unanticipated client sites to 
be involved in business pro- 
cessing transactions based 
on XML docs; analyze, dsgn 
dvip, impimt modules, XML 
schemas & messages, dvip 
JSP & XML parser to dvip 
web enabled front end for 
insurance s/ware prdcts; & be 
involved in QA & customer 
suppert. Send resume to 
Atiam Tech., Attn: B. Oakes. 
350 Baldwin Towers. 
Eddystone, PA 19022 


Prog/Analysts to analyze 
design appis using C++, Java 
HTML VB JavaScript 
Weblogic, SQL, Oracle, MS 
Access under Windows, UNIX 
OS; perform and document 
data modeling; study, evaluate 
new technologies/methodolo- 
gies; gather, document reqs 
from user community; test/trou- 
bleshoot project appli code. 
Require: BS or foreign equiv. in 
CS/Engg. (any branch) with 2 
yrs expin IT. High Salary. Travel 
involved. F/T. Apply to: HR 
Unilinx, Inc, 4625 Alexander Dr. 
Ste 110, Alpharetta, GA 30022 


SOFTWARE ENGINEERS (12 
positions): require Bachelor's or 
equivalent in Engineering 
Computer Science/Mathema 
tics/Science or closely related 
fi with two years experience 
providing sk 

duties, at 

Provide on-site consultin 
design, analysis anc 

ment of software app 

legacy systems in 

frame 


ment 


Sybase 

applications developr 
Microsoft, Java and relate: 
nologies network manage 
systems 


Netscape 


Programmer 
Provider 

seeks a p 

Denver 

supervis 

ately complex tasks 
the deve 

billing com: 

cations that rur 

ation server with MV 


nal database. C 


developme 
a Bachelo 


reigr 

equivalent of the d 
gree equivalent ir 

cation and experier 

resume and 

Z3 Technol 

Shepherd Ct 

WI-53186 

resumes@z3tech.co 


Prog/Analysts tc analyze 
design, develop and = maintair 
custom business appis in client 
server environment using C 
Java, EJB, JSP. viets, XML 
VisualAge, Weblogic, COBOL 
CICS, Oracle, etc; design/devel- 
op enterprise appisincluding 
B2Band B2Cfor mt Ss 
design,develop Java applets & 
run batch process to generate 


lifecycle. Require Bachelor's 
Degree or foreign equiv in CS. 
Engineering any branch) or 
related field with 2 yrs exp in the 
software industry. High salary 
f/T. some travel involved 
Resumes: HR, Opai Soft, Inc 
3150 Almaden Expwy Ste 205. 
San Jose, CA 95118 


Computerworld + InfoWorld + Network World + August 25, 2003 


Manager 


objects 

Engineering + 5 yrs. exp. in 

Duties. Apply Confident Software 
95 Fe Road 





SAP Analyst - Analyze user 

requirements, procedures and 

problems to customize SAP's 

client/server systems for cus- 

tomers. Analyze current opera- 

ional procedures, identify prob- 

ms, and write detailed descrip- 

of user needs, program 

and steps req'd 

or modify SAP comput- 

ms. Must have at least 

> years experience as SAP 

° lems Analyst 

htStar, 6601 

Owens r Suite 115, 

Pleasanton, CA 94588, ATTN 

HR, or e-mail to 

jobs@brightstar.com 


the position 
Database Administrator 
Highlands Ranch, CO to di 
install, maintain and administer 
nformix 
Server relational 
er t systerr quire- 
this position include 
computer sc 
or related field and DBA e: 
ence as well as working know 


Ridgeline 
ich, CO 


Systms Anlyst 
inst 
systm, appictn ¢ 


Standrds & maint 


s. Resp: Sky Bird Trave' 
Attn: HR Man 


SBI is looking for the following 
Is for its offices in 
Houston, TX, San Francisco. 
Warren, NJ, Salt Lake 
UT and Portland, OR 
Analysts, Tech- 
ects, Technica 
Consultants, Business Strate- 
gists, Systems Analysts, Soft- 
ware Engineers, Art Dir r 
resumes by email or fax only 
to HR, SBI 2825 East 
Cottonwood Parkway 
480, Sait Lake City 
84121 
careers@sbiandcomp: 
Fax (801) 733-3201 


Western Computer is look- 
ing for Hardware Engineer. 
Senior Developer to pro- 
gram manage, provide pro- 
gramming, design, develop 
and analyze customer pro- 
gramming projects and to 
develop hardware _inter- 
faces. Please send resume 
salary requirement to 
Western Computer, Atten- 
tion: Diane, 960 Enchanted 
Way, Simi Valley, CA 93065 
or email at 
dianee@westerncomputer.com 


IT|Careers 


PROGRAMMER ANALYSTS 
for Worth, IL office. Design & 
Develop software applications 
using C++, Oracle, Sybase, 
XML, UML, Coolgen, Inter- 
woven, ClearCase, Clear- 
Quest, ITS, PVCS, UNIX 
Bachelors req'd in Computers 
Engineering, math or any 
related field of study +2 yrs of 
related exp. 40 hrs/wk. Must 
have legal authority to work 
permanently in the U.S. Send 
resume to HR Manager, Core 
Infosys Technologies, inc 
7179 West 111th St. Worth, IL 
60482 


Software Engineers and 
Programmer Analysts for 
S/W company in Chicago. 
IL. All positions require 
Bachelor's degree in Comp 
Science/ Computer Engin- 
eering or related field and 1- 
3 years related experience 
Send resume to 
SystemGuru Inc, 500 North 
Michigan Avenue, Suite 300 
Chicago, IL 60611. Attn 
Sowjanya Manacha 


PROGRAMMER ANALYSTS 
gfield, IL office. Design 

velop software applica- 
using C++, Oracle 

ML, UML, Coolgen 
Interwoven, ClearCase, Clear- 
Quest, ITS, PVCS, UNIX 
Bac rs req'd in Computers 
Engineering, Math or related 
field of study +2 yrs of related 
exp. 40 hrs/wk. Must have 
legal authority to work perma- 
nently in the U.S. Contact HR 
Manager, Global Infotech 
Solutions, Inc, 826 West 
Laurel, Suite 1B,Springfield 


applicants 


ns in Orlan 


xperience in sys- 
lopment 

+, UNIX and 

x Shell Script 


Suite 1 Orlando. 
EOE M/F/D/V. 


SYSTEM ANALYSTS for 
Chicago, IL office Design 
Analyze & Implement software 
applications to support 
EH&S/MM/HR/QM/PP_ modules 
in SAP R/3 environment using 
ABAP/4,BAPI, ALE, LSMW 
BDC, DCOM, RFC, Oracle 
IDOCS, Data Interface, User 
Exits, C++, Perl and Shell script- 
ing. Bachelors required in 
Computers Engineering or 
related field of study + 2 yrs of 
related experience. 40 hrs/wk. 
Must have proof of legal author- 
ity to work permanently in the 
U.S. Please send resume and 
cover letter to HR Manager. 
Masterminds Global Solutions. 
LLC, 6000 Fairview Road 
#1200, Charlotte, NC 28210 


Computerworld + InfoWorld » Network World » August 25, 2003 


Full time position to work as 
Programmer Analyst, Exper- 
ience in ISQL, SQL, PL/ SQL 
ABAP/4, Visual Basic, SQL 
Server 2000/7.0, Oracle 
7,x/8.x, Erwin, Taboxp, TOAD 
DBArtisian, requires Bach- 
elor's degree in Computer 
information 
Engineering or equivalent and 
2 years of experience in the 
job offered. Applicants sent 
resume to Vital Sciences, Inc 
13878 Golden Saddle Court 
Carmel, IN 46032 


systems or 


Programmers & Software 
Engineers to analyze, design 
develop and test apps. in (a) 
J2EE technologies and related 

EJB, Websphere, XML 
XSL, RDBMS, Unix, Clearcase 
(b) Mainframes, COBOL, CICS 
JCL, DB2, Java, JDBC, JSP, 
Serviets; (c) VB, ASP, .NET 
Framework, COM+ Java 
scrip/DHTM, SQL. Server and 
related Microsoft technologies 
(d) EAl, Webmethods Enterprise 
and Integration, ColdFusion 
SeeBeyond, JMS, JMX, Oracle 
US Workers only. Consulting 
positions requiring travel 
Pre 1g wage/benefits. Send 
resume to H.R. 4208 Van Buren 
Dr. #139, West Des Moines IA 
50266. EOE 


Programmers to analyze/devel- 
op software is using Oracle 
Apps, Oracle, PL/SQL, Dev 
2000, etc under Windows/UNIX 
OS; assist in customizing and 
migrating Oracle App; customize 
Forms/Reports using Oracle 
Application standards; docu- 
ment development process. 
Require: BS or foreign equiv. in 
CS/Engg. (any branch) & 6 
months of exp. In lieu of BS 
3yrs_ of academic studies 
towards a Bachelor's degree 
plus 1 yr of exp in IT will be 
accepted. Travel involved. F/T 
position. Competitive salary 
Resume to: HR Quest 
America,inc., 211 East Ontario 
Street, Suite 1800, Chicago, IL 
60611 


tite 


companies 


esate cate 
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e-ssential 
companies 

e-normous 
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ITCAREERS.COM 
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The World Of 
Work Is Changing 
very Week. 


LUCKILY, WE ARE Too! 
itcareers.com is now powered 


by CareerJournal.com! 


Search for jobs and post 
your resume here on 


www.itcareers.com 





CW030825E/WiMW 3 





ae eal 
IT career? 


Check out our jobs 
in the combined 
CareerJournal.com 


database. 


www.itcareers.com 
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Programmer/Analyst: Designs 
develops, modifies, and sup- 
ports MACWIS application using 
PowerBuilder8.0 with Oracle 
Must have BS or equivaient in 
CS/Math/Engineering or relat- 
ed. Must have 2 yrs exp. in job 
offered or in Developing 
MACWIS appl. using Power- 
Builder and Oracle. Will accept 
a foreign degree evaluated by a 
recognized authority as equiva- 
lent to a bachelor’s degree. Must 
be willing to be assigned to 
unanticipated client sites 
throughout the State of Maine. 
Salary: $70,000/yr. Hrs: 8:00am- 
5:00pm, 40/wk. Please send 2 
copies of resume to: Bureau of 
Labor Standards, 45 State 
House Station, Augusta, Maine 
04333- 0045 Please refer to Job 
Order #39747 for Programmer. 
Analyst 


You can finda 


eaaaen 
JOB 


with one hand 


tied 


behind your 


Just point your 


mouse to the world’s 


best 


IT careers site, 


powered by 


CareerJournal.com 


Check us out at: 


www.itcareers.com 








REMOTE OPTIMIZATION 
CONSULTANT 


Remote Optimization Consultant 
need by The Reynolds and 
Reynolds Company's Tampa 
Florida office. Consuitant spe- 
cializes in the management of 
information systems and con- 
sulting services for the retail 
auto industry. Duties include 
performing custom consulting 
for French-speaking fixed opera- 
tions of automobile dealerships 
in regard to the implementation 
and utilization of an application 
and providing access to service 
and parts pricing information for 
customer pay operations, includ- 
ing prices for parts, labor, mate- 
rials, and taxes. Analyzing deal- 
ers’ fixed operations and provid- 
ing information technology solu- 
tions to resolve customer 
issues. Creating and maintain- 
ing documentation in French 
fegarding technology solutions 
and customer correspondence 
and developing training materi- 
als in French, including exercis- 
es and visual displays. Training 
French-speaking users on soft- 
ware, remotely, or recommend- 
ing consultants to provide train- 
ing. Associate in Business 
Administration required with 1 yr 
exp working in fixed operations 
of an automobile dealership 
Must be able to read, speak, and 
write French fluently. Exp may 
be gained concurrently. In lieu 
of Associate degree, may have 2 
additional yrs of exp. Schedule 
8:00 a.m. to 5:00 p.m., M-F. To 
apply send resume to S 
Galbraith, The Reynolds & 
Reynolds Company, 115 South 
Ludiow St., Dayton, OH 45402 
referencing Job Order AA (NO 
CALLS) 


Web Developer 


Senior Web Developer- Update 
& build company web pages 
monitor site traffic & effective- 
ness, & monitor & troubleshoot 
web system issues. Work with 
project mgmt. to coordinate 
updates of content & infrastruc: 
ture. Ensure technical integrity 
& user sibility of site 
Evaluate software/hard- 
ware use in infrastructure. 
Must have Bach. Deg. in 
Comp. S c ng'g, or relat- 
ed fieid & 2 yrs. exp. in the job 
offered or in a web based devel- 
opment or analysis occup. Must 
have exp Java, J2EE, & 
ATG Dynamo. Send resume to 
Kapian, In 7th Ave., New 
York, NY ) Attn: Preeti 


Torres. 


SOFTWARE ENGINEER: Soft- 

ware e' o design, develop 

and test f programs for 

business apf tions analyze 

software req . > deter- 

mine feasibility c direct 

software system testing proce 

dures using e ir 

WebSphe ) Series, Clear- 

SQL & JMS 

elor's Degree 

Computer 

field and two 

as a software 

engineer ter program- 

knowled WebSphere 

learCase, DS82 

JMS lary 

Working Cond- 

5:00 P.M., 40 

hours/week, involves extensive 

travel equent relocation 

Apply: BECS/CareerLink Program 

Supervisor, Indiana County 

CareerLink, 300 Indian Springs 

Road, Indiana, PA 15701, Job No 
WEB319750 


IT|cCareers 


Data-Core Group, Inc. delivers 
innovative IT solutions to busi- 
ness clients nationwide We 
have immediate, full-time oppor- 
tunities for experienced Progra- 
mmers, Programmer Analysts. 
Systems Analysts, Database 
Designers, and Software Engin- 
eers with a Bachelor's degree in 
Electrical Engineering or 
Computer Science and one year 
of experience in any of the fol- 
lowing skill sets:PB, EA Server. 
SQL, Oracle or Sybase. VB or 
VC++ or VC#, Embedded VC++ 
MFC, .net, WinForms, ASP or 
ASP.net, ADO or ADO.net, ORA 
CLE, SQL Server, DB2 or 
Sybase; in some positions also 
Crystal Reports or other Report 
Writer, Visual SourceSafe or 
other version control, Rationai 
Rose or other modeling tool 
MVS, JCL, COBOL, CICS, DB2 
and Internet related skills such 
as Java, JavaScript, HTML 
DHTML Oracle 8, DB2 (UDB 5). 
Sybase 11, SQL Server 2000 or 
higher, Triggers, Stored Procs 
SQL, PL/SQL or equivalent, C. 
Pro C or equiv VC#, .net, COM+ 
ASP.net, XML, MSMQ, ADO.net 
Java, J2EE, Javascript, EJB 
CORBA, XML MQSeries. 
Websphere, DB2, AIX, Solaris or 
other UNIX; in some positions 
also C/C++ Computer network- 
ing & data communications 
Oracle or other database admin 
LAN & WAN networking & server 
admin on Microsoft & Unix piat- 
forms SNMP, Frame Relay. 
UNIX, C, Socket Interface 
Network Node Manager, TCP/IP, 
Open View, Shelli scripting 
Oracle SQL Configuration 
Management 

Will also accept the foreign edu- 
cational eequivalent of degree. 
All positions require frequent 
travel and relocation throughout 
the U.S. Excellent benefits 
Send résumé to 3700 Science 
Center, Ste 203, Philadelphia, PA 
19104 Visit our website at 
www.datacoresystems.com 


PROSOFT TECHNOLOGY 
GROUP, INC. has immediate. 
full-time multiple opportunities 
for experienced Programmers 
Programmer Analysts, and 
Systems Analysts, with a 
Bachelor's degree and one year 
of experience in three or more of 
the following: 

ERP, SAP R/3_ Functional 
Modules, ABAP/4 Reporting 
Basis, BW, SEM, CRM, SAP 
Business One SAP Net 
Weaver, C++, Visual C++ 
Oracle Applications, Peoplesoft 
and Siebel, EAI/B2B Integration 
Beyond and Mercator 
eSolutions, SAP Portals (Top 
Tier), Web Logic, Web Sphere 
iPlanet and J2EE Technologies 
Enterprise Reporting, Actuate 
Crystal Reports Data 
Warehousing, Cognos and 
Business Objects 

We also accept the foreign edu- 
cational equivalent of the univer- 
sity degree. All positions require 
frequent travel and relocation 
throughout the U.S. Send confi- 
dential résumé and salary 
requirements to Ref # Pete - 
2004 Attn: HR Manager Prosoft 
Technology Group, Inc., 2001 
Butterfield Road, Suite 1050 
Downers Grove, IL 60515 Visit 
our website at 
www.prosoftgroup.com 


SOFTWARE ENGINEER to 
design, develop, test and imple. 
ment application software on 
mainframe and Windows plat 
forms for the retail and manufac- 
turing industries using DB2 
COBOL, CICS, Visual Basic 
JCL, TSO, File-Aid, OAM 
Endevor, Roscoe Xpeditor. 
Platinum Tools, MS Project and 
Visio. Require: M.S. degree in 
Computer Science/Engineering, 
or a closely related field with 2 
yrs. of exp in the job offered. 
Extensive travel on assignments 
to various client sites within the 
U.S. is required. Competitive 
salary offered. Apply by resume 
to: Sophie Mookerjie, Software 
Paradigms International, Inc 
3901 Roswell Rd, Ste 134 
Marietta, GA 30062; Attn: Job 
RR 


BEA Systems, inc. currently has opportunities available for the fol- 
lowing positions (various levels/types) for locations throughout the 


U.S., including CA (San Jose & San Frar 0); CO (Boulder 


Denver, Colorado Springs) 


(Burlington); and NJ (Liberty Corner) 


Software Engineers* 
Systems Analysts 


Seattle & Kirkland); MA 


Database / Systems Administrators 
Product / Project / Technicai Manager 


“Travel may be required 


Please reference CW803 when you 
apply. Send resume to BEA Systems, Inc 


Attn: HR-Staffing, 2315 North First 
San Jose, CA 95131. Fax: (408) 570- 


E-mail: Refer to career 
www.bea.com. Principals 


PROSOFT TECHNOLOGY 
GROUP, INC. has immediate. 
full-time multiple opportunities 
for experienced Programmers. 
Programmer Analysts and 
Systems Analysts with a 
Bachelor's degree and one year 
of experience in three or more of 
the following 

ERP, SAP R/3_ Functional 
Modules, ABAP/4 Reporting 
Basis, BW, SEM, CRM, SAP 
Business One, SAP Net 
Weaver, Cr+, Vis C++ 
Oracle Applications, Peoplesoft 
and Siebel, EAI/B2B integration 
Beyond and Mercator 
eSolutions, SAP Portals (Top 
Tier), Web Logic, Web Sphere. 
iPlanet and J2EE Technologies, 
Enterprise Reporting, Actuate 
Crystal Reports Data 
Warehousing Cogno and 
Busin Objects 

We also accept the foreign e 
cational equivalent of the univer- 
sity degree. All positions require 
frequent travel and reloc 
throughout the U.S 

dential résumé and salary 
requirements to Ref # Pete - 
2004 Attn: HR Manager Prosoft 
Technology Group 

Butterfield Road, S 

Downers Grove 

our website at 
www.prosoftgroup 


COMPUTER 
Software Engineer (Multiple 
positions). Requires Bachelor's 
Degree in Comp. Science 
Electronic & Electrical Eng., or 
Comp. Science & Engineering 
(or equiv. foreign educ.) & 3 
years’ exp. in the job offered or 3 
years’ exp. in the design of real- 
time embedded software in C & 
Assembly for manufacturing 
applications. Stated exp. must 
include one year with each of 
the following: designing software 
for automotive applicati 
coordinating software mgmt 
processes using C.M. Synergy 
Ciearcase, or PVCS; & use of 
logic analyzers ircuit emula- 
tors, & MATLAB/Simulink mod 
eis of software algorithms 
Design real-time embedded 
software in C & Assembly for 
automotive manufacturing appli- 
cations. 40 hrs./wk. Apply with 
resume to: Delphi Corporation 
Attn: Joseph Zuzula 
Holland Road, Saginaw 

01 


4860 


COMPUTER/IT 

Systems Administrator (New 
York, NY). Requires Bachelor's 
degree (or tiigher) in Comp. Sci 
MIS, or Math & 3 yrs.’exp. in the 
job offered or 3 yrs." exp in 
Crystal, SQR, & nVision report 
devel. to accommodate ad 
agency apps. on Peoplesoft 
ERP system. All stated exp 
must include: interfacing media 
files w/Peoplesoft financials 
providing system support for 
financial closing activities 
config. time entry & approval 
groups. Develop Crystal, SOR. 
& nVision reports to accommo- 
date ad. agency apps. on a cus- 
tomized Peoplesoft ERP sys- 
tem. 40 hrs./wk. Apply with 
resume to: Carey Myers 
Publicis, !nc., 14185 North 
Dallas Parkway, Dallas, Texas 
75254. Reference Job #2300 


Computerworld + InfoWorld + Network World - August 25, 2003 


Member of Technical Staff - 
Systems Engineer: Design 
develop and deploy business 
models nvolving 
and Java program 
usteri 
niques 
WebSphere and WebL 
application servers; design and 
develop applications using web 
technologies; develop UNIX sys: 
tem packages for deployment of 
various applications in large 
data centers; develop high per- 
formance and fault tolerant inter 
faces to hundreds of back office 
systems. Requires Bachelors 
degree in Computer Science 
and three years experience in 
ffered or three years 
ce in software engi- 
ing Java and ud: 
ing one year using WebSphere 
Salary $92,850 per year; 40 
hrs/wk, 8AM to 5PM, Monday 
Friday. To apply, submit two 


copies of your resume tc 


Case #200202727 
Labor Exchange Office 


f f 


yd St, 1st 


ston MA 02114 


Associate Engineer 


Pitney Bowes 


j experience with 


Calif. based IT co. has 
openings at its Torrance 
office and unanticipated 
client sites across the US 
for Programmer/Analysts. 
Software Engineers and 
Business Development 
Consultants. Send re- 
sume with salary history 
and requirements to RJT 
Compudquest, 23430 
Hawthorne Bivd., #305 
Torrance, CA 90505 Attn 
Suzanne 
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Emerging Tools Target | 


Blackout Prevention 


BY THOMAS HOFFMAN 

New technologies under de- 
velopment, such as real-time 
modeling and simulation sys- 
tems, could help utilities react 
swiftly enough to transmission 
problems to avoid widespread 
power failures. 

But energy industry experts 
warn that even analytical tools 
that enable rapid responses to 
power grid glitch- 
es might fall short 
of preventing the 
kind of multi- 


that led to the na- 
tion’s largest-ever 
blackout earlier 
this month. 

“For that type 
of situation, 
events happen faster than 
we're able to react to them,” 
said Revis James, program 
manager for the strategic sci- 
ence and technology program 
at the Electrical Power Re- 
search Institute (EPRD, an en- 
ergy research consortium in 
Palo Alto, Calif. 


In the Works 


EPRI is working to build a dy- 


namic, real-time modeling sys- | 


tem that would take into ac- 
count such things as varia- 
tions in power loads over the 
course of each day. After com- 
pleting a three-year effort in 
2001 in which it examined the 
applied mathematics and soft- 
ware needed to support this 
type of system, EPRI plans in 
the next few months to issue a 
request for proposals to devel- 
op a first version of the soft- 
ware, James said. 

But according to James, 
there are two formidable chal- 
lenges: being able to create a 
simulation in seconds, not 
hours, and being able to do so 
by using microprocessor tech- 
nologies within a distributed 
computing environment in- 


| 
| 


What we 
need isa 
pronged failures digital grid for 
the next century. 


CRAIG G. GOODMAN, 
PRESIDENT, NATIONAL ENERGY 
MARKETERS AS 


SOCIATION 





stead of relying on supercom- 
puters or other large-scale 
processors. “It’s not clear if 
you can do the computations 
fast enough to do this kind of 
modeling,” he added. 

Jill Feblowitz, an analyst at 
Boston-based AMR Research 
Inc., agreed that it’s uncertain 
whether computer modeling 
can be done quickly enough to 
react to the kinds 
of problems that 
triggered the re- 
cent blackout, 
which affected 50 
million people in 
eight states and 
Canada. 

“These things 
happen so quick- 
ly that even if 
you run a simulation analysis, 
you might not have enough 
time, and that’s the issue that 
people are grappling with 
right now,” she said. 

There are also existing tech- 
nologies that haven’t been 
broadly adopted that could 
help utility operators react 
faster to grid problems. One of 
them is called FACTS, or Flex- 





“stressful” grid conditions. 
Fortunately for PG&E, it came 
across a robust analytical tool 
in 2000 from a vendor called 


| Grupo AIA in Barcelona, 
| Spain. After four months of pi- 


lot testing, PG&E in mid-2001 


| purchased the software, which 


runs on a Cluster of four-CPU 
IBM workstations, said Stuart. 
He said the cost of the soft- 


| ware, including installation, 


was just under $1 million. 
Even with the advent of 
technologies designed to help 


| automate and link intercon- 


Continued from page 1 


terprises since Sept. 11, 2001, 
have clearly enabled them to 
respond to the crisis in an ef- 
fective manner,” she wrote. 
But while tens of millions of 


| dollars spent by companies on 
| redundant networks, comput- 
| er systems, storage-area net- 


works (SAN) and long-dis- 
tance data replication may 
have protect data, it was often 
the most obvious things that 


| caused the best-laid disaster 


ible AC Transmission Systems, | 
| added that he had no lighting 


a semiconductor-based hard- 
ware technology that works 
like a valve in rerouting the 
flow of electricity when 
there’s a system overload. 

But although the cost of 
FACTS setups has dropped in 
recent years, they still can to- 
tal millions of dollars per unit. 
“They're not very easy to cost- 
justify,” said Bob Stuart, man- 
ager of operations engineering 
at PG&E Utility in San Fran- 
cisco. EPRI’s James estimates 
that FACTS technology has 
been implemented by just “a 
single-digit percentage” of the 
U.S. power industry. 

Stuart said he believes that 
most of the analytical tools on 
the market aren’t up to snuff 
when it comes to dealing with 


recovery plans to go awry. 
Jurgensen said Time didn’t 
lose data and the company’s 
disaster recovery plan worked 
as it was expected to. But he 


in his network operations cen- 
ter, diesel generator fuel-pump 
room or the mechanical equip- 
ment room because they 
weren't hooked up to generator 


| power. “We didn’t have any 


portable radios. We could have 


| used more flashlights,” he said. 


Sean O’Brien, manager of in- 
formation systems at Ottawa 
Regional Cancer Center, lost 


| his Microsoft Exchange Server 
| and another critical server be- 
| cause a downed air-condition- 


ing unit leaked an inch of water | 


onto the floor of his data cen- 
ter. O’Brien said he was able to 
restore the data onto two new 
servers from a SAN he in- 
stalled last year from Xiotech 
Corp. in Eden Prairie, Minn. 





nected transmission systems, 
many industry experts con 
tend that the underlying pow- 
er-grid infrastructure is still 
woefully inadequate. 

“Our grid system was built 
for the Industrial Revolution. 
What we need is a digital grid 
for the next century,” said 


| Craig G. Goodman, president 


of the National Energy Mar- 


| keters Association, a nonprofit 


trade organization in Wash- 
ington. 
Goodman claimed that ef- 


| forts to expand and modernize 


‘Blackout | 


“The flooding we had came 
from one area of the ceiling,” he 
said. “The thing to do is make 
sure the SAN is on one side of 
room and the servers are on the 
other. If we'd lost the SAN, we 
would have had our tape back- 


| up, and that’s stored on another 





campus. But you can build only 
so much redundancy, based on 
your budget.” 

Edward Koplin, an engineer 
at Jack Dale Associates PC, an 
engineering firm in Baltimore, 
said a lack of disaster testing 
is the No. 1 cause of data cen- 
ter failures. Koplin suggested 
that companies test their 
diesel generators often and at 
full load for as long as they’re 


| expected to be in use. 


“You must consider your 
engine plant your primary 
source of power and consider 
the utility your preferred 
source of power,” said Koplin, 


| whose firm designs backup 


power systems for corporate 


| data centers. 


Jurgensen said Time’s criti- 
cal systems stayed up because 
“our CTO demands we test our 
generators once a month. We 
don’t just test them for 40 min- 


| utes; we run them anywhere 


from two to four hours.” 
Forbes.com’s Smith said one 
lesson he thinks many IT 
managers will have learned 
from the outage is that out- 
sourcing services can be the 
difference between continuing 


| to operate and sitting around 


in the dark. 








the nation’s electrical and gas 
grids have been stalled by en- 


| vironmental groups and politi- 
| Cal interests. B 


| Computerworld’s Matt Ham- 


blen contributed to this story. 


MORE ONLINE 


Congress plans to investigate the blackout 
and the grid’s vulnerability to cyberattack 
QuickLink 40774 

Telecom union lambastes the performance 
of Verizon's network during the blackout 


QuickLink 40824 
www.computerworld.com 


Smith said his online publi- 
cation and e-mail broadcasts 


| didn’t so much as hiccup be- 
| cause he outsources his net- 


work operations to Verio Inc. 
in Englewood, Colo., and uses 
Evergreen Assurance Inc. in 
Annapolis, Md., to provide a 
fail-over e-mail service. 

“The centerpiece to our be- 
ing operational throughout 
this was our ability to com- 
municate through e-mail,” he 
said. “People who have their 


own data center wiil be forced 


to consider whether having 
that data center on their own 
premises will be worth it.” D 


x= 


Tips on how to avoid 
recovery breakdowns: 
KEEP application servers, back- 
up servers and tape libraries iso- 
lated from one another. 


UPGRADE backup power 
systems to keep pace with data 
center power consumption. 
TEST generators at full load for 
the length of time you expect to 
use them in an emergency. 
MAKE SURE critical areas 

such as network operations cen- 
ters are connected to alternate 
power sources. 


HAVE walkie-talkies available. 
Phones willl likely be too cumber- 
some for fast communications. 


ots re Cen enon ee 


HAVE two additional power gen- 
erators on hand as backups. 
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eating Blackouts 


Y THE TIME YOU READ THIS, the lights will have been 
back on for a week already in New York, Detroit, Cleve- 
land and Toronto. Electricity has been restored. The 
trains are running again. The spoiled food has been 
thrown out. The political fights over who’s to blame for 


the Blackout of 2003 have begun. 


Solving the problems with the North American electric power 
grid will take years and require tens of billions of dollars. 

But improving your IT shop’s ability to handle the next blackout 
will take a few hours — and you can pay for it out of petty cash. 


Sure, you’ve got a big-picture disaster recov- 
ery plan. But little things count, too — so here’s 
a list of items that may fill some small but criti- 
cal gaps the next time around. 

Radios for listening. When the power goes out, 
you need information. How bad is it? How 
widespread? When will the juice come back on? 
Get a few cheap, battery-powered radios to 
make sure you have access to whatever infor- 
mation is available. Then test them to make 
sure you can actually receive local radio broad- 
casts inside your office or data center. 

Radios for talking. You count on your cell 
phone for communications in an emergency, 
right? You shouldn’t. In emergencies, cell net- 
works get overloaded. In an extended blackout, 
battery backups for cellular base stations run 
down. Pick up a few kids’ walkie-talkies to use as 
intercoms. Forget the expensive kind — these 
just need to work within your department. 

Phones that don’t require external power, on 
phone lines connected directly to the telephone 
network. Telephone service usually stays up af- 
ter the lights go out, but if phones or switch- 
boards require external power, you can’t use it. 
Get a direct line for IT if you don’t 
have one already and attach a no- 
frills phone to it. 

A low-power PC on a high-powered 
UPS (uninterruptible power supply), 
with an internal modem and its own 
direct phone line. An old laptop will 
probably do — and on a good UPS, 
it could run for hours. Add a cheap 
dial-up account with a national In- 


Updated ISP access numbers in other cities. Even 
if the modem pools in New York and Toronto 
are blacked out, the ones in L.A. and Vancouver 
are probably working fine. 

Flashlights — a few good ones, lots of cheap 
ones. In the dark, there’s no such thing as too 
many flashlights. Besides, you can always can- 
nibalize them for batteries. 

Batteries. Batteries for the radios. And the 
walkie-talkies. And the flashlights. Make sure 
you've got more than enough. Sure, their shelf 
life is limited. But they’re cheap. And during a 
power failure, nothing can take their place. 

Updated contact lists - on paper. When you’ve 
got only one working PC, you don’t want to 
waste power and time searching for critical 
phone numbers on the screen. Print them out. 

Updated blackout procedures - on paper. In a cri- 
sis, even smart people can forget the obvious. 
Print out step-by-step instructions and put 
them in bright-red loose-leaf binders. Then at- 
tach a cheap flashlight to each binder with Vel- 
cro fasteners. Even step-by-step instructions 
are no good if it’s too dark to read them. 

A designated employee to check these items every 
month. That means printing out 
new copies of contact lists and 
blackout procedures, updating 
binders, switching on flashlights 
and radios to test them, counting 
spare batteries and replacing 
equipment and supplies that have 
gone missing. 

Yes, that employee time is the 
most expensive item on the list. 
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What's Really Important 


The new wireless access point for this small office is 
working fine when pilot fish installs it. But a week later 
the secretary calls to complain that it's almost un- 
usable because of low signal strength. Over-the- 
phone troubleshooting isn’t working until fish tells her 


to try adjusting the antenna. 


“That would be difficult,” 


she says. “| moved my fountain in front of it. You know, 
the big metal one with all the plants on it? It's great - 
you can't even see that box or its antennas at all.” 


Oops! 


Design director 


manager pilot fish for a 
big favor: An out-of-state : 
designer needs access to : 
the archives, which are 
all in filing cabinets. Fish : 
to spec out the database, : 
pulls resources to get it 
implemented and gets 
people trained. Buttwo : 
weeks later, no data isin 
the database. Why? asks : 
fish. “Oh, we won't be 
able to use it after all,” 
says design director. 

“We just aren't data- 

entry types.” 


Because It’s New? : 
fish gets anotefroma 
that, after two weeks of : 
testing, new network =: 
been certified for use on : 
the county's network. 
Fish responds, “Where is : 
Gigabit Ethernet being 
used on campus? I'd like : 
to see how it affects 
their subnet, to see if | 
would benefit by using it : 
in my little corner of the 
network.” Net tech’s 

reply: Gigabit Ethernet 
isn't used anywhere on 
the network. “Then 

what's the benefit of in- 


SHARK 
this textile 

dstrbtin TANK. 
company asks IT 


use them?” 
fish asks - and 
is still waiting 
for an answer. 


Developer pilot fish gets 
dinged by boss on his 


: annual review for “fail- 


ure to go above and be- 
yond to satisfactorily 
meet users’ needs.” So 


: on his next assignment, 


user didn't think of - 
and the user is very hap- 


py with the end result. 
: And fish? “I was disci- 


: when his boss walks by 


fish’s open door. Minutes 


: later, he summons fish 


to his office. “You're an 


: officer,” boss says. 
: “Your job is to supervise. 


You have enlisted 


i Marines to do the typ- 
: ing.” Fish nods in agree- 
: returns to his office - 
: and moves his desk so it 
: can no longer be seen 


FEED THE SHARK! Send your true tale of IT life to 


ternet service provider, and you'll 
be able to send and receive e-mail 
and get information from the Web 
long before your own network is 
back up again. 


But it’s the one place you don’t 
want to cheap out — so you'll get 
the benefit of the rest of your 
preparations the next time the 
lights go out. B 


FRANK HAYES, Computer- 
world's senior news colum- 
nist, has covered IT for more 
than 20 years. Contact him at 


sharky@computerworld.com. You snag a snazzy 
Shark shirt if we use ii. And check out the daily feed, browse 
the Sharkives and sign up for Shark Tank home delivery at 
computerworld.com/sharky. 








Knowledge You Need. 


Track changing market conditions, follow the latest news and 
develop strategies for deploying new technology. 
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Visit Computerworld.com and get all the knowledge 
you need to make informed, confident decisions. 


Computerworld.com/knowledgecenters 
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EMC 


where information lives 


BECAUSE YOUR INFORMATION 
IS NOT A COMMODITY. 


ThE New SyMMeTRIX DMX 


The world’s leading information storage system just got better. Introducing the enhanced 
Symmetrix DMX. New high-end and entry-level options. The industry’s best non-disruptive 

capabilities. The ability to replicate more data, more cost-effectively — across the room or 

across the ocean. Rapid innovation from EMC, where information lives. 


EMC.com/dmx 1.866.symm.dmx/1.866.796.6369 


The Symmetrix DMX Series 
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